Security readout for executives and security teams
Plain-English summary
SAP Business One may write sensitive data into B1 client memory dump files in clear form. If someone with sufficient local access obtains those files, they could use the information for unauthorized activity in the Business One environment, including company data changes. Public data does not indicate active exploitation.
Executive priority
Treat as a moderate-priority SAP data protection issue. Prioritize environments containing sensitive financial or company data, shared endpoints, or broad administrative access. The main business concern is misuse of exposed data, not service outage.
Technical view
CVE-2026-24319 is a CWE-316 cleartext storage issue in SAP Business One B1 client memory dump files. CVSS 3.1 is 5.8: local attack vector, low complexity, high privileges required, user interaction required, with high confidentiality and integrity impact and no availability impact.
Likely exposure
Exposure is most relevant where SAP Business One 10.0 components listed as B1_ON_HANA 10.0 or SAP-M-BO 10.0 are deployed and client memory dump files are accessible to privileged local users, administrators, support staff, or endpoint tooling.
Exploitation context
The CVSS vector indicates local access, high privileges, and user interaction are required. The source bundle does not show public exploitation or CISA KEV listing. Risk depends heavily on who can access client dump files and what sensitive data they contain.
Researcher notes
Available public details are limited to the CVE record and SAP references. The vulnerability is described as sensitive information written unobfuscated to B1 client dump files. Do not assume remote exploitability or active exploitation without additional vendor or threat-intelligence confirmation.
Mitigation direction
- Review SAP Note 3679346 and SAP Security Patch Day guidance for vendor-approved remediation.
- Inventory affected SAP Business One 10.0 deployments and B1 client installations.
- Restrict access to B1 client memory dump files to authorized personnel only.
- Reduce retention and exposure of memory dumps according to SAP and internal policy.
- Monitor for inappropriate access to dump file locations.
Validation and detection
- Confirm whether B1_ON_HANA 10.0 or SAP-M-BO 10.0 is present.
- Check SAP Note 3679346 for affected builds and required actions.
- Identify systems where B1 client memory dump files are generated.
- Review permissions on dump file storage locations.
- Verify remediation or compensating controls are documented after SAP guidance is applied.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-316: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2026-24319 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N0.65.2Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
5.8MediumVector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Source materials
- CVE List V5 sourceCVE List V5
- https://me.sap.com/notes/3679346CVE reference
- https://url.sap/sapsecuritypatchdayCVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Cleartext Storage of Sensitive Information in Memory
Cleartext Storage of Sensitive Information in Memory represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.