CVE-2021-33700
SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of the vulnerable application.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - cna@sap.com
- Published
- 2021-09-15
- Last modified
- 2024-08-03
- Weaknesses
- CWE-287, CWE-288
Affected products
References
- https://launchpad.support.sap.com/#/notes/3073325
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806
