Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-47581 EUVD-2024-42812GHSA-h63v-27qr-66h7

Missing Authorization check in SAP HCM (Approve Timesheets version 4)

Published Dec 10, 2024 · Updated Dec 10, 2024 · Assigned by sap

Description

SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted.

Affected products

VendorProductAffectedFixed
SAP_SE SAP HCM S4HCMGXX 101 —

Advisories 2

References