SAP HCM My Timesheet Fiori 2.0 Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the SAP HCM My Timesheet Fiori 2.0 application. The issue arises because the application fails to implement necessary authorization checks for authenticated users. This lack of proper authorization can lead to unauthorized privilege escalation, significantly impacting the application's integrity, while leaving confidentiality and availability unaffected.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation within the application.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically in the Security Notes section. For guidance on accessing and applying SAP Security Notes, refer to the SAP Security Notes FAQs.