PT-2020-19035
CVE-2020-6239
·
تاريخ النشر
2020-06-10
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
4.4
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SAP Business One versions 9.3, 10.0
Description
The issue allows an attacker with admin permissions to view the SYSTEM user password in clear text under certain conditions, leading to information disclosure.
Recommendations
For versions 9.3 and 10.0, consider restricting access to the Backup service to minimize the risk of exploitation until a fix is available.
As a temporary workaround, limit admin permissions to only necessary personnel to reduce the potential for attackers to view sensitive information.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾