Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Business_one | Sap | 9.2 (including) | 9.2 (including) |
| Business_one | Sap | 9.3 (including) | 9.3 (including) |