VULNERABILITY INTELLIGENCE
CVE-2021-38179
CVSS score4.9 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2021-10-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Description
Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- cna@sap.com — Permissions Required
- cna@sap.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory