Authorization Bypass in SAP ERP HCM Portugal Payroll Reports

CVE-2021-42062

Summary

The SAP ERP HCM Portugal system contains a vulnerability that allows an attacker to bypass necessary authorization checks when accessing employee payroll reports. This oversight enables unauthorized users to read sensitive payroll data without the ability to alter any information or disrupt system availability. Ensuring effective authorization protocols is crucial for safeguarding sensitive employee information against unauthorized access.

References