CVE-2022-26104

5.3MEDIUM

Key Information:

Vendor
SAP
Status
SAP Financial Consolidation
Vendor
CVE Published:
10 March 2022

Summary

SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.

Affected Version(s)

SAP Financial Consolidation < 10.1

References

https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/3144941
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.