CVE-2021-27605
CVE-2021-27605
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 4.3EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
13 abr 2021Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authenticated but unauthorized attacker to read personnel numbers of employees, resulting in escalation of privileges. However, the attacker can only read some information like last name, first name of the employees, so there is some loss of confidential information, Integrity and Availability are not impacted.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
SAP SE · SAP Fiori Apps 2.0 for Travel Management in SAP ERPQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →