Visma Public: Missing authorization allows sales only user to record payment.

The researcher has found a missing authorization issue that allowed a sales only user to record payments that he was not supposed to...

Visma Public: Improper access control allows sales only user to view bank balance of company accounts.

The researcher has found an access control issue that allowed a sales only user to view the bank balance of company accounts. This details should not be visible for missing permissions users...