CVE-2021-42062

2021-11-1015:30:39

CWE-862

sap

www.cve.org

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.

CNA Affected

[
  {
    "product": "SAP ERP HCM Portugal",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 600"
      },
      {
        "status": "affected",
        "version": "< 604"
      },
      {
        "status": "affected",
        "version": "< 608"
      }
    ]
  }
]