Authorization Bypass Vulnerability in SAP ERP HCM Portugal Software

CVE-2022-22535

What is CVE-2022-22535?

The SAP ERP HCM Portugal software fails to enforce necessary authorization checks when generating a specific report that accesses payroll data for employees. This vulnerability could allow unauthorized users to view sensitive payroll information without the ability to modify it or disrupt system availability. Such exposure of employee data poses a significant risk to organizations relying on secure payroll management functionalities.

References