SAP Business One Information Disclosure Vulnerability in Anonymous API

An information disclosure vulnerability has been identified in the anonymous API of SAP Business One (SLD). This vulnerability allows an attacker with normal user access to access unauthorized information. While the vulnerability has a low impact on the application's confidentiality, it does not affect integrity or availability.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.