SAP Note 2383912
SAP security note 2383912, "Insecure Logoff functionality in CA-WUI-APF", is a note. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
When using a non-IC business role, clicking the Log Off link at the top of the screen prevents the Login page from appearing upon reconnecting to the system.
Solution
Please implement the attached correction instructions or install the corresponding support package.
Reason and prerequisites
Program error.
References
Referenced by
- 2745878 – When logging off the Web UI in one window, the other open windows log off also.
- 2556527 – Logon or business role selection screen displayed after refreshed webUI when using a non-IC business role.
- 2437078 – Single Sign On to Web UI – Is it possible to redirect to the Business Role selection screen after hitting the ‘Log Off’ button?
Affected components
- WEBCUIF 701
- WEBCUIF 731
- WEBCUIF 746
- WEBCUIF 747
- WEBCUIF 748
- WEBCUIF 800
- WEBCUIF 801
Full note on SAP: SAP Support Launchpad note 2383912
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
