SAP security note 1987927, “Security risk with logout feature in standalone POD”, is a note released on July 8, 2014. Below is the security information published by SAP for this note.
Description
Symptom
>This issue occurs when the Production Operator Dashboard (POD) is accessed via a standalone URL. After logging out by clicking the logout link, the user session might sometimes remain active. This allows the next user utilizing the same PC to open the POD with the credentials of the first user without needing to log in again. Clicking the logout link twice will always terminate the session properly.
Solution
Code corrections have been implemented within the WPMF framework to ensure that the logout process is executed every time the logout icon is clicked in the POD.
Full note on SAP: SAP Support Launchpad note 1987927
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
