CVE-2021-42062CWE-862

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area

published November 10, 2021

CVSS
—
EPSS
1%
Percentile
46.5
In the wild
Unconfirmed
What it is

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00571 · 46.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2021-11-10T15:30Z
EPSS history
Timeline
  • 10 NOV 15:30Z
    SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area
    cvelistv5