ZeroHour

CVE-2021-42062

CVSS 3.1
4.3 medium
EPSS
<1%p45
Published
()
Modified
Description

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.

Vendors
sap
Products
erp human capital management
Weakness
CWE-862
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.