CVE-2021-27637

Published: Jun 9, 2021Modified: Nov 21, 2024

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure.

Affected (2)

Products: Sap: Enable Now

Sap

1 product

Enable Now

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Sap Enable Now	Version 1.0
Sap Enable Now	Version 10.0

References (4)

https://launchpad.support.sap.com/#/notes/3049879

Source: cna@sap.com

Permissions RequiredVendor Advisory

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999

Source: cna@sap.com

Vendor Advisory

https://launchpad.support.sap.com/#/notes/3049879

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredVendor Advisory

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.