CVE-2024-47581 — Missing Authorization check in SAP HCM (Approve Timesheets version 4)

CVE-2024-47581

Missing Authorization check in SAP HCM (Approve Timesheets version 4) PUBLISHED

Description (CNA)

SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP HCM	affected S4HCMGXX 101

CWE

CWE-862

References

https://me.sap.com/notes/3522332
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.