SAP security note 1589258, "Unauthorized use of application functions in uxs_document". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A malicious user can execute functions in UXS_DOCUMENT without authentication and authorization.
Solution
To resolve the security issue: delete the BSP application UXS_DOCUMENT, delete the SICF node sap/bc/bsp/sap/uxs_document, and use the report UXS_XML_SHOW to display internal XML documents.
Reason and prerequisites
UXS_DOCUMENT executes certain functions by referencing specific URLs. When a malicious user tricks an authenticated user's browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the authenticated user. The malicious user may use a cross-site scripting attack to do this, or they may present a link to the victim.
CVSS
Score 0
Affected components
- SAP_ABA
Full note on SAP: SAP Support Launchpad note 1589258
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].