Vulnerabilities > CVE-2021-42066 - Unspecified vulnerability in SAP Business ONE 10.0
Attack vector
NETWORK Attack complexity
HIGH Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypted. For an attacker to discover vulnerable function in-depth application knowledge is required, but once exploited the attacker may be able to completely compromise confidentiality, integrity, and availability of the application.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |