CVE-2021-27605

SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authenticated but unauthorized attacker to read personnel numbers of employees, resulting in escalation of privileges. However, the attacker can only read some information like last name, first name of the employees, so there is some loss of confidential information, Integrity and Availability are not impacted.

CVSS v3 4.3 MEDIUM
CVSS v2.0 4.0 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://launchpad.support.sap.com/#/notes/3025054	Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649	Vendor Advisory
https://launchpad.support.sap.com/#/notes/3025054	Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:fiori_apps_2.0_for_travel_management_in_sap_erp:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:58

Type	Values Removed	Values Added
References	~~() https://launchpad.support.sap.com/#/notes/3025054 - Permissions Required~~	() https://launchpad.support.sap.com/#/notes/3025054 - Permissions Required
References	~~() https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649 - Vendor Advisory~~	() https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649 - Vendor Advisory

Information

Published : 2021-04-13 19:15

Updated : 2024-11-21 05:58

NVD link : CVE-2021-27605

Mitre link : CVE-2021-27605

CVE.ORG link : CVE-2021-27605

JSON object : View

Products Affected

sap

fiori_apps_2.0_for_travel_management_in_sap_erp

CWE

CWE-862

Missing Authorization

{"id": "CVE-2021-27605", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2021-04-13T19:15:15.477", "references": [{"url": "https://launchpad.support.sap.com/#/notes/3025054", "tags": ["Permissions Required"], "source": "cna@sap.com"}, {"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649", "tags": ["Vendor Advisory"], "source": "cna@sap.com"}, {"url": "https://launchpad.support.sap.com/#/notes/3025054", "tags": ["Permissions Required"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authenticated but unauthorized attacker to read personnel numbers of employees, resulting in escalation of privileges. However, the attacker can only read some information like last name, first name of the employees, so there is some loss of confidential information, Integrity and Availability are not impacted."}, {"lang": "es", "value": "HCM Travel Management Fiori Apps V2 de SAP, versi\u00f3n - 608, no lleva a cabo una comprobaci\u00f3n de autorizaci\u00f3n apropiada, permitiendo a un atacante autenticado pero no autorizado leer los n\u00fameros personales de los empleados, resultando en una escalada de privilegios. Sin embargo, el atacante solo puede leer determinada informaci\u00f3n como el apellido, el nombre de los empleados, por lo que hay determinada p\u00e9rdida de informaci\u00f3n confidencial, la Integridad y Disponibilidad no est\u00e1n afectadas"}], "lastModified": "2024-11-21T05:58:16.920", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:fiori_apps_2.0_for_travel_management_in_sap_erp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54B30165-5E80-4107-9BE0-118D286C7FCF", "versionEndExcluding": "608"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}