CVE-2019-0353 — LOW (3.3) — White Hats Nepal

Vulnerability Description

Under certain conditions SAP Business One client (B1_ON_HANA, SAP-M-BO), before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted.

CVSS Score

3.3

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Sap	Business One Client	9.2

References

https://launchpad.support.sap.com/#/notes/2768864Permissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506Vendor Advisory
https://launchpad.support.sap.com/#/notes/2768864Permissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506Vendor Advisory

FAQ

What is CVE-2019-0353?

CVE-2019-0353 is a vulnerability with a CVSS score of 3.3 (LOW). Under certain conditions SAP Business One client (B1_ON_HANA, SAP-M-BO), before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted.

How severe is CVE-2019-0353?

CVE-2019-0353 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-0353?

Check the references section above for vendor advisories and patch information. Affected products include: Sap Business One Client.