CVE-2021-42062

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...

CVE-2021-42062

creationtimestamp| type| source ---|---|--- 2021-11-10 18:36:27+00:00| seen| https://t.me/cibsecurity/32161...

CVE-2021-42062

CVE-2021-42062 affects SAP ERP HCM Portugal where a report that reads employee payroll data fails to perform necessary authorization checks. The root cause is missing access controls on that read-only payroll report. Impact is limited to disclosure of payroll information (no data modification or ...