Description
NWBC can be used for phishing attacks by allowing an attacker to publish a URL purporting to be from the product, which redirects the victim to a URL chosen by the attacker. This enables an attacker to falsely gain the trust of a victim and elicit private data from them (such as authentication information).
Available fix and Supported packages
- BC-WD-CLT-BUS | 3.0 | 3.0
- BC-WD-CLT-BUS | 3.5 | 3.5
- NWBC NW BUSINESS CLIENT 3.0 | SP000 | 000010
Affected component
- BC-FES-BUS-RUN
Runtime
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1628709
