SAP security note 1567387, "Unauthorized modification of stored content in DTN". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A malicious user can exploit the Detail Navigation to modify and persist application content without authorization. This can lead to unauthorized access to authentication information of other users.
Solution
Apply the appropriate Hot Package as detailed in the attached corrections.
Reason and prerequisites
DTN within Navigation does not sufficiently encode input parameters, resulting in a reflected cross-site scripting (XSS) issue. An attacker can exploit this vulnerability to deface or modify displayed content and steal authentication information, potentially impersonating users, including administrators, thereby compromising the application’s security.
CVSS
Score 4.3 Vector: AV:N/AC:M/AU:N/C:N/I:P/A:N
Affected components
- EP-PSERV (7.00 to 7.02)
- EP-RUNTIME (7.11 and 7.20)
Full note on SAP: SAP Support Launchpad note 1567387
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
