SAP Security Note
Low priority
SAP security note 2403010, "Cross-Site Request Forgery (CSRF) vulnerability in BI LaunchPad", is a program error note released on 11.04.2017. Below are the symptom and SAP recommended solution.
Description
Symptom
BILaunchPad allows an attacker to trick an authenticated user to send unintended requests to the web server. This vulnerability is due to insufficient CSRF protection.
Some well-known impacts of CSRF vulnerability are:
- An authenticated user could be manipulated into performing actions on behalf of the attacker.
- Loss of non-repudiation.
Solution
CSRF Token has been implemented for the requests.
This issue is fixed in the patches for your release. For Business Intelligence Platform maintenance schedule and strategy see Knowledge Base Article 2144559.
Reason and prerequisites
There was no CSRF token validation for the requests.
CVSS
Score 3.5 Vector: AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References
This note refers to
Full note on SAP: SAP Support Launchpad note 2403010
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].