VULNERABILITY INTELLIGENCE

CVE-2020-6239

CVSS score4.4 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2020-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure.

Weakness classification

  • CWE-522: Insufficiently Protected Credentials

Primary references