PT-2021-17549 · Sap · Sap Business One Hana Chef Cookbook

Published 2021-05-11 · Updated 2021-05-21 · CVE-2021-27614

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Business One Hana Chef Cookbook versions 8.82 through 10.0

Description The issue allows an attacker to inject code that can be executed by the application, potentially controlling the application's behavior and highly impacting its integrity and availability.

Recommendations For versions 8.82 through 10.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2021-27614

Affected Products

Sap Business One Hana Chef Cookbook

References · 4

• https://launchpad.support.sap.com/#/notes/3049661 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27614 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27614 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655 · Vendor Advisory