SAP security note 2365450, “XSS Vulnerability in SAP NetWeaver SLC Sell Side Registration Page”. Below are the symptom and the SAP recommended solution.
Description
Symptom
Malicious code may be entered on the sell side and saved without an authorization check during registration. For any user opening UIs in a browser, the code may be executed if the unified rendering is not up-to-date.
Impacts of XSS Vulnerability:
- Non-permanently deface or modify displayed content from a website
- Steal authentication information of the user, such as data relating to their current session
- Impersonate the user and access all information with the same rights as the target user
Solution
- Version Update: Read the Version Update Guide on how to perform the version update. Pay special attention to the section “Before you start the process!”
- Implement Corrections: Apply the attached Correction Instruction or the mentioned Support Package to resolve the issue.
Reason and prerequisites
The SLC Sell Side Registration Page does not sufficiently sanitize input, resulting in a persistent cross-site scripting issue. A persistent XSS attack can store malicious code in the database, which may be executed by any user displaying the data in a browser if proper output encoding is not performed.
CVSS
Score 5.4 Vector: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
Full note on SAP: SAP Support Launchpad note 2365450
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
