Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
Summary
Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality...
Original description The description as published by the source.
Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality and availability are not impacted.
Source: CVE.org (CVE Program・cvelistV5) NVD
References
- web me.sap.com
- web url.sap