SAP Security Note
High priority
SAP security note 1598412, “Possible SQL Injection in WEBCUIF”, released on 08.11.2011. Below are the symptom and SAP recommended solution.
Description
Symptom
Potential disclosure of persisted data in CRM_BRC_UI and UIF_FLIGHT.
A malicious user can exploit CRM_BRC_UI and UIF_FLIGHT by using specially crafted inputs to modify database commands, resulting in the retrieval of additional information persisted by the system.
Solution
There are no manual steps required. Please apply the correction instructions provided below.
Reason and prerequisites
The issue is caused by an SQL injection vulnerability. The code constructs an SQL statement that includes strings which can be manipulated by a malicious user. This manipulated SQL statement can then be used to retrieve data from the database.
Full note on SAP: SAP Support Launchpad note 1598412
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].