CVE-2022-22535CWE-862
SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a…
published February 9, 2022
What it is
SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00834 · 57.2th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2022-02-09T22:05Z
EPSS history
Timeline
09 FEB 22:05Z
SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a…
cvelistv5