Authorization Bypass Vulnerability in SAP ERP HCM Portugal Software

CVE-2022-22535

Summary

The SAP ERP HCM Portugal software fails to enforce necessary authorization checks when generating a specific report that accesses payroll data for employees. This vulnerability could allow unauthorized users to view sensitive payroll information without the ability to modify it or disrupt system availability. Such exposure of employee data poses a significant risk to organizations relying on secure payroll management functionalities.

References