CWE
862
Advisory Published
Updated

CVE-2021-42062

First published: Wed Nov 10 2021(Updated: )

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.

Credit: cna@sap.com cna@sap.com

Affected SoftwareAffected VersionHow to fix
SAP ERP=600
SAP ERP=604
SAP ERP=608

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2021-42062?

    CVE-2021-42062 has a medium severity level due to the lack of proper authorization checks in the payroll data report.

  • How do I fix CVE-2021-42062?

    To fix CVE-2021-42062, apply the official patch provided by SAP for the affected versions of its ERP HCM Portugal software.

  • Which versions of SAP ERP HCM are affected by CVE-2021-42062?

    CVE-2021-42062 affects SAP ERP HCM versions 600, 604, and 608 specifically for the Portugal release.

  • Can an attacker modify payroll information through CVE-2021-42062?

    No, an attacker cannot modify payroll information through CVE-2021-42062 as it only allows reading the data.

  • What types of data are exposed in CVE-2021-42062?

    CVE-2021-42062 potentially exposes payroll data of employees in certain areas without sufficient authorization checks.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203