4.3
CVE-2021-42062
- EPSS 0.13%
- Veröffentlicht 10.11.2021 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:27:10
- Quelle cna@sap.com
- Teams Watchlist Login
- Unerledigt Login
SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Erp Human Capital Management Version600 SwEditionportugal
SAP ≫ Erp Human Capital Management Version604 SwEditionportugal
SAP ≫ Erp Human Capital Management Version608 SwEditionportugal
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.291 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.