CVE-2021-27613
Assigner: sap
Published: 2021-05-11T14:19:33
State: PUBLISHED
affected: product: SAP Business One (Cookbooks)
vendor: SAP SE
versions: status: affected
version: < 9.2
status: affected
version: < 9.3
status: affected
version: < 10.0
descriptions: value: Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to Information Disclosure and highly impact system confidentiality, integrity and availability.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.0
problemTypes: descriptions: description: Information Disclosure
type: text