Authorization Vulnerability in SAP's HCM Travel Management Fiori Apps

CVE-2021-27605

What is CVE-2021-27605?

A vulnerability in SAP's HCM Travel Management Fiori Apps V2, version 608, allows an authenticated but unauthorized individual to access sensitive personnel information, such as employee names. This results from inadequate authorization checks within the application. While the affected party can view limited details, it poses a risk to user privacy by exposing sensitive employee data. The application's integrity and availability remain unaffected, but the potential for privilege escalation highlights the need for prompt remediation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References