Multiple vulnerabilities in SAP Business One



Published: 2021-09-14
Risk Medium
Patch available YES
Number of vulnerabilities 4
CVE-ID CVE-2021-37532
CVE-2021-33688
CVE-2021-33686
CVE-2021-33685
CWE-ID CWE-200
CWE-89
CWE-22
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		SAP Business One
Mobile applications / Apps for mobile phones

Vendor SAP

Security Bulletin

This security bulletin contains information about 4 vulnerabilities.

1) Information disclosure

EUVDB-ID: #VU56497

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2021-37532

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to enabled directory listing. A remote user can gain unauthorized access to sensitive information on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

SAP Business One: 10.0

CPE2.3 External links

http://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
http://launchpad.support.sap.com/#/notes/3075546


Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?

2) SQL injection

EUVDB-ID: #VU56496

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2021-33688

CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Exploit availability: No

Description

The vulnerability allows a remote user to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote user can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

SAP Business One: 10.0

CPE2.3 External links

http://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
http://launchpad.support.sap.com/#/notes/3069882


Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?

3) Information disclosure

EUVDB-ID: #VU56495

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2021-33686

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote attacker can gain unauthorized access to sensitive information on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

SAP Business One: 10.0

CPE2.3 External links

http://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
http://launchpad.support.sap.com/#/notes/3070138


Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?

4) Path traversal

EUVDB-ID: #VU56494

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2021-33685

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Exploit availability: No

Description

The vulnerability allows a remote user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote user  can send a specially crafted HTTP request and read arbitrary files on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

SAP Business One: 10.0

CPE2.3 External links

http://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
http://launchpad.support.sap.com/#/notes/3069032


Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###