This vulnerability involves an IDOR issue in Infor Global HR v11.24.10.01.33, specifically in the Employee Compensation View function. An attacker without authentication or privileges can manipulate a GET request to access compensation data of other employees, violating access controls. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact without integrity or availability impact. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Unauthorized disclosure of sensitive employee compensation information can occur, potentially leading to privacy violations and insider information leaks. There is no indication of integrity or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected function where possible and monitor for suspicious requests targeting employee compensation data. Avoid exposing direct object references in URLs or API calls.