Description
Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW permission to update/create PaymentApplication.
Affected versions before : 24.09.08
Users are recommended to upgrade to version 24.09.08 which fixes this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache OFBiz | < 24.09.08 | 24.09.08 |
Advisories 1
- WID-SEC-2026-4357 Apache OFBiz: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 5, 2026