Description
SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.
References
https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
Vendor Advisory
https://launchpad.support.sap.com/#/notes/3144941
Permissions RequiredVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
5.3 · Medium
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Analyzed
Published
2022-03-10T17:47:31.600
3 years agoLast modified
2022-03-18T01:29:10.057
3 years ago