SAP Note 1498227
SAP security note 1498227, “Unauthorized modification of display content in CRM_UIU_CA2”, is a note. Below is the security information published by SAP for this note.
Description
Symptom
The UI component CRM_UIU_CA2 can be abused by a malicious user, allowing unauthorized modification of displayed application content and potential theft of authentication information from other legitimate users.
Solution
Apply the attached correction instructions provided in the SAP Note.
Full note on SAP: SAP Support Launchpad note 1498227
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].