What is the vulnerability ID of this SAP Business One vulnerability?

The vulnerability ID is CVE-2023-31403.

What is the severity of CVE-2023-31403?

The severity of CVE-2023-31403 is critical with a score of 9.6.

What versions of SAP Business One are affected by CVE-2023-31403?

SAP Business One version 10.0 is affected by CVE-2023-31403.

How does CVE-2023-31403 affect SMB shared folders?

CVE-2023-31403 allows malicious users to read, write, execute, or use files in SMB shared folders without proper authentication and authorization checks.

Are there any references or resources available for CVE-2023-31403?

Yes, you can find more information about CVE-2023-31403 at the following references: [Reference 1](https://me.sap.com/notes/3355658) and [Reference 2](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).

Vulnerability/
CVE-2023-31403

critical

9.6

CWE

863

14/11/2023

28/9/2024

CVE-2023-31403: Improper Access Control vulnerability in SAP Business One product installation

First published: Tue Nov 14 2023(Updated: )

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

Credit: cna@sap.com

Affected Software	Affected Version	How to fix
Sap Business One	=10.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID of this SAP Business One vulnerability?
The vulnerability ID is CVE-2023-31403.
What is the severity of CVE-2023-31403?
The severity of CVE-2023-31403 is critical with a score of 9.6.
What versions of SAP Business One are affected by CVE-2023-31403?
SAP Business One version 10.0 is affected by CVE-2023-31403.
How does CVE-2023-31403 affect SMB shared folders?
CVE-2023-31403 allows malicious users to read, write, execute, or use files in SMB shared folders without proper authentication and authorization checks.
Are there any references or resources available for CVE-2023-31403?
Yes, you can find more information about CVE-2023-31403 at the following references: [Reference 1](https://me.sap.com/notes/3355658) and [Reference 2](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).

agent/weakness
agent/references
agent/type
agent/first-publish-date
agent/softwarecombine
agent/severity
agent/title
agent/author
agent/tags
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/description
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup
vendor/sap
canonical/sap business one
version/sap business one/10.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.