CVE-2021-27637

5.9MEDIUM

Key Information:

Vendor
SAP
Status
SAP Enable Now (SAP Workforce Performance Builder - Manager)
Vendor
CVE Published:
9 June 2021

Summary

Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure.

Affected Version(s)

SAP Enable Now (SAP Workforce Performance Builder - Manager) < 1.0 < 1.0

SAP Enable Now (SAP Workforce Performance Builder - Manager) < 10 < 10

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/3049879
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.