SAP Security Note
High priority
SAP security note 1674100, "Unauthorized modification in ITS-Service in SRM-EBP-PRC", is a note released on 08.05.2012. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
SRM-EBP-PRC can be abused by a malicious user, allowing them to modify displayed application content without authorization and potentially obtain authentication information from other legitimate users.
Solution
Apply this note or import the changes via the relevant support package. Ensure that the corrections from notes 1621946 and 1488500 are also implemented for full protection.
Reason and prerequisites
ITS Service TS_TS10007947H within SRM-EBP-PRC does not sufficiently encode output parameters, resulting in a cross-site scripting vulnerability. This can be exploited to steal another user’s authentication information or impersonate an administrator, compromising the application’s security.
References
- 1621946 – ITS: updated XSS-escaping functions
- 1488500 – ITS: automatically escape context fields in output
Affected components
- SRM_SERVER 500
- SRM_SERVER 550
- SRM_SERVER 600
- SRM_SERVER 700
- SRM_SERVER 701
- SRM_SERVER 702
Full note on SAP: SAP Support Launchpad note 1674100
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].