SAP Security Note
Low priority
SAP security note 2353643, "Information Disclosure in Webdynpro LIST UIBB: Search hits are marked in invisible cells", is a program error note released on October 14, 2017. Below are the symptom and SAP recommended solution.
Description
Symptom
In FPM ListATS, search hits are displayed in cells that are set to invisible. While the content of these cells is not visible, users can still obtain some information from them. Additionally, if other services are active simultaneously, the LIST may crash.
Solution
Please implement the note to address this vulnerability.
Reason and prerequisites
This issue is caused by a coding error.
Full note on SAP: SAP Support Launchpad note 2353643
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].