PT-2021-17551 · Sap · Sap Business One Hana Chef Cookbook

Published 2021-05-11 · Updated 2022-07-12 · CVE-2021-27616

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Business One Hana Chef Cookbook versions 8.82 through 10.0

Description The issue allows an attacker to exploit an insecure temporary backup path, resulting in information disclosure. This highly impacts the confidentiality, integrity, and availability of the application.

Recommendations For versions 8.82 through 10.0, update to a version that fixes the insecure temporary backup path issue to prevent information disclosure.

Fix

Related Identifiers

CVE-2021-27616

Affected Products

Sap Business One Hana Chef Cookbook

References · 4

• https://launchpad.support.sap.com/#/notes/3049661 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27616 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27616 · Security Note