CVE-2021-33685

published 2021-09-14

CVE-2021-33685: SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restricted directory. A successful attack allows access to high level sensitive data

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	business_one	—	—
sap_se	sap_business_one	< 10.0	10.0

CWE-22