Description
Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Fiori Apps Reference Library (My Overtime Requests) | GBX01HR5 605 | — |
Advisories 2
- NCSC-2025-0045 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Feb 11, 2025
- WID-SEC-2025-0307 SAP Patchday Februar 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 10, 2025