SAP security note 1228869, “Security note Problem with WD ABAP password input field”, is published by SAP for the affected component listed below. The description reproduces the information SAP released for this note.
Description
Under certain rare circumstances a password that has been entered in a Web Dynpro ABAP application could be disclosed.
This issue does not affect the login screen or login popup window that allows the user to sign on to a system right after starting a Web Dynpro ABAP application. Neither does it affect logging into a portal.
CVSS
Score 0
Affected components
- SAP_BASIS | 700 | 701
- SAP_BASIS | 710 | 711
- SAP_BASIS 711 | SAPKB71101
- SAP_BASIS 710 | SAPKB71007
- SAP_BASIS 700 | SAPKB70017
- SAP_BASIS 701 | SAPKB70102
Full note on SAP: SAP Support Launchpad note 1228869
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].