High priority
SAP security note 1628709, "Potential False Redirection in NWBC", is a program error note released on 13.03.2012. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
An attacker can publish a URL that appears to be from NWBC, which redirects victims to a URL of the attacker’s choice. This false redirection enables attackers to mimic pages of the target application (e.g., login pages) to deceive users into disclosing sensitive information.
Solution
The vulnerability is fixed in the following NWBC versions:
- NWBC 3.0 SP0 PL10
- NWBC 3.5 SP0 PL1
Additionally, NWBC now allows only connections to predefined systems by administrators. An admin can enable the AllowTemporaryConnections switch to permit users to connect to predefined systems or temporary systems as needed.
Affected components
- BC-FES-BUS-RUN
- NWBC 3.0 up to SP0 PL10
- NWBC 3.5 up to SP0 PL1
Full note on SAP: SAP Support Launchpad note 1628709
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
