SAP Security Note
High priority
SAP security note 1511751, "Unauthorized usage of application functionality in SNC", is a program error note released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A malicious user can trigger functionality in SNC without authentication and authorization.
Solution
Perform the attached manual corrections.
- As a pre-requisite, install Note 1508661.
- For SNC releases 7.0 and below, as a pre-requisite, install Note 1520324.
Reason and prerequisites
SNC executes certain functions through referencing specific URLs. When an attacker tricks an authenticated user’s browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the user. If present, the attacker may use a Cross Site Scripting attack to trigger the exploit, or use an approach in which a link to click is presented to the victim.
References
- 1540729 – ASU content for activating XSRF protection for BSP
- 1520324 – Advance creation of XSRF information
- 1508661 – Note icons are not consistent within SNC
Affected components
- SCMSNC versions 510, 700, 701
- SCM_BASIS versions 410, 500
Full note on SAP: SAP Support Launchpad note 1511751
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
