description: Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure.
problem types: Information Disclosure
affected:
{
product: SAP Enable Now (SAP Workforce Performance Builder - Manager)
vendor: SAP SE
versions:
status: affected, version: < 1.0
status: affected, version: < 10
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
version: 3.0
]