Unscored CVE-2022-26104 EUVD-2022-30672GHSA-pwgc-g75r-hxqw

SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for a…

Published Mar 8, 2022 · Updated Aug 3, 2024 · Assigned by sap

Vendor: SAP Product: SAP Financial Consolidation

Description

SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.

Affected products

Vendor	Product	Affected	Fixed
SAP SE	SAP Financial Consolidation	< 10.1	—

References

https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
https://launchpad.support.sap.com/#/notes/3144941