SAP security note 2246608, "Cross Site Scripting (XSS) Vulnerability in the Logon Application". Below are the symptom, SAP recommended solution, reason and prerequisites, and the CVSS score.
Description
Symptom
A Cross-Site Scripting (XSS) vulnerability has been identified in the AS Java Logon application due to insufficient encoding of user-controlled inputs. This vulnerability can allow attackers to execute malicious scripts in the context of a user’s browser session.
- Deface or Modify Content: Attackers can non-permanently deface or modify the displayed content on a website.
- Steal Authentication Information: Sensitive information such as session data can be intercepted.
- User Impersonation: Attackers can impersonate users and access information with the same privileges as the targeted user.
Solution
Apply the corrective measures outlined in the Validity and Support Package Patch Level sections of this note. Ensure that all relevant software components and support packages are updated to mitigate this vulnerability.
Reason and prerequisites
The AS Java Logon application does not sufficiently encode output parameters, leading to a reflected cross-site scripting issue.
CVSS
Score 6.1 / 10 Vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Full note on SAP: SAP Support Launchpad note 2246608
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].