CVE-2023-31403

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

• CWE-863
• CWE-863

• https://me.sap.com/notes/3355658Permissions Required
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
• https://me.sap.com/notes/3355658Permissions Required
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Published

Nov 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31364Improper handling of direct memory writes in the input-outpu…8.3
• CVE-2023-31365An integer overflow in the SMU could allow a privileged atta…3.9
• CVE-2023-31366Improper input validation in AMD μProf could allow an attack…5.5
• CVE-2023-3138A vulnerability was found in libX11. The security flaw occur…7.5
• CVE-2023-3139The Protect WP Admin WordPress plugin before 4.0 discloses t…6.1
• CVE-2023-3140Missing HTTP headers (X-Frame-Options, Content-Security-Poli…4.3
• CVE-2023-31404Under certain conditions, SAP BusinessObjects Business Intel…5
• CVE-2023-31405SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERC…5.3
• CVE-2023-31406Due to insufficient input validation, SAP BusinessObjects Bu…6.1
• CVE-2023-31407SAP Business Planning and Consolidation - versions 740, 750,…5.4
• CVE-2023-31408Cleartext Storage of Sensitive Information in SICK FTMg AIR …7.5
• CVE-2023-31409Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENS…7.5