Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2023-31403

Improper Access Control vulnerability in SAP Business One product installation

Description

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business One

Default version status: unaffected

  • 10.0affected

References