CVE-2021-27614: 
SAP Business One vulnerability analysis and mitigation

SAP Business One Hana Chef Cookbook, versions 8.82, 9.0, 9.1, 9.2, 9.3, and 10.0, used to install SAP Business One on SAP HANA, contains a code injection vulnerability that allows attackers to execute arbitrary code through the application (CVE Details).

The vulnerability has a CVSS v3.1 Base Score of 7.1 (High), with an Impact Score of 5.2 and Exploitability Score of 1.8. The attack vector is Local (AV:L), requires Low attack complexity (AC:L), Low privileges (PR:L), and No user interaction (UI:N). The scope is Unchanged (S:U), with No impact on Confidentiality (C:N), but High impact on both Integrity (I:H) and Availability (A:H) (AttackerKB).

The successful exploitation of this vulnerability allows an attacker to control the behavior of the application, significantly impacting the integrity and availability of the system. The attacker can execute injected code through the application, potentially leading to unauthorized control over the SAP Business One installation process (CVE Details).

Organizations using affected versions of SAP Business One Hana Chef Cookbook should refer to SAP's security advisory for detailed mitigation instructions (SAP Note).