description: SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.
problem types: CWE-862
affected:
{
product: SAP ERP HCM Portugal
vendor: SAP SE
versions:
status: affected, version: < 600
status: affected, version: < 604
status: affected, version: < 608
}