CVE-2022-26104

published 2022-03-10

CVE-2022-26104: SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I L A N

SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	financial_consolidation	—	—
sap_se	sap_financial_consolidation	< 10.1	10.1

CWE-862