PT-2022-12024 · Sap · Sap Business One

Published 2022-01-14 · Updated 2022-01-21 · CVE-2021-44234

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Business One version 10.0

Description The issue concerns the extended log in SAP Business One, which stores sensitive information. This can provide valuable guidance to an attacker or expose sensitive user information.

Recommendations For SAP Business One version 10.0, consider restricting access to the extended log to minimize the risk of sensitive information exposure.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2021-44234

Affected Products

Sap Business One

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-44234 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-44234 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/3106528 · Note