SAP Note 2407193
SAP security note 2407193, "[CVE-2018-2442] Cross-Site Request Forgery (CSRF) in BI Launchpad Web Intelligence". Below are the symptom and SAP recommended solution.
Description
Symptom
In Web Intelligence, while viewing a Web Intelligence report from BI Launchpad, user session details captured by an HTTP analysis tool could be reused in an HTML page while the user session is still valid.
Impacts of CSRF Vulnerability:
- Attacker could take actions on behalf of an authenticated user
- Loss of non-repudiation
Solution
- Implemented filter mapping to ensure that valid tokens are used.
- Added a hidden parameter to requests, validated by the filter in addition to the CSRF token.
Reason and prerequisites
The affected user needs to be logged in.
CVSS
Score 4.3 Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
References
Full note on SAP: SAP Support Launchpad note 2407193
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].