SAP security note 2201796, "Unauthorized modification of displayed content in Authentication framework". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The AS Java Authentication framework can be exploited by an attacker, allowing unauthorized modification of displayed application content and potentially accessing authentication information from other legitimate users.
Solution
Update your AS Java to a Support Package (SP) or release where this issue is resolved. Refer to the "Validity" and "Support Package Patches" sections of this note for detailed information and available patches.
Reason and prerequisites
The AS Java Authentication framework does not sufficiently encode output headers, leading to vulnerabilities that allow header manipulation. This can be used to non-permanently deface or modify content displayed on a website.
Affected components
- Basis Components > NetWeaver Application Server Java > Security, User Management > Logon, SSO (BC-JAS-SEC-LGN)
- ENGINEAPI versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50
Full note on SAP: SAP Support Launchpad note 2201796
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
