CVE-2021-42062CWE-862
SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area
published November 10, 2021
What it is
SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00571 · 46.5th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2021-11-10T15:30Z
EPSS history
Timeline