CVE-2020-6239

MEDIUM

SAP Business One <10.0 - Info Disclosure

Title source: llm

Description

Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure.

References (2)

Scores

CVSS v3 4.4
EPSS 0.0003
EPSS Percentile 9.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-522
Status published

Affected Products (2)

sap/business_one
sap/business_one

Timeline

Published Jun 10, 2020
Tracked Since Feb 18, 2026