Description

Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure.

Related CPE's

a

sap

enable_now

2

References

https://launchpad.support.sap.com/#/notes/3049879

Permissions RequiredVendor Advisory

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999

Vendor Advisory

https://launchpad.support.sap.com/#/notes/3049879

Permissions RequiredVendor Advisory

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999

Vendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.6 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-06-09T12:15:09.487Z

4 years ago

Last modified

2024-11-21T04:58:21.060Z

1 year ago