CVE-2019-0325

SAP ERP HCM (SAP_HRCES) , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area

published July 10, 2019

CVSS
—
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

SAP ERP HCM (SAP_HRCES) , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain access to the same data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00792 · 55.9th percentile
Published
2019-07-10T19:04Z
EPSS history
Timeline
  • 10 JUL 19:04Z
    SAP ERP HCM (SAP_HRCES) , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area
    cvelistv5