Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
概要
Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality...
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality and availability are not impacted.
出典: CVE.org (CVE Program・cvelistV5) NVD
参照URL
- web me.sap.com
- web url.sap