CVE-2021-27605

Summary: CVE-2021-27605 affects SAP HCM Travel Management Fiori Apps V2 (608). The issue is an improper authorization check that permits an authenticated but unauthorized user to read personnel numbers, enabling privilege escalation. The attacker can access limited personnel data (last name, firs...