Take care for misleading IE Favorites, SAP security note 1635593

SAP Note 1635593
SAP Security Note
Low priority

SAP security note 1635593, "Take care for misleading IE Favorites", is an external error note released on December 13, 2011. Below are the symptom and SAP recommended solution.

ComponentCRM-FRW-AFP

CategoryExternal error

PriorityCorrection with low priority

TypeSAP Security Note

Version2

StatusReleased for Customer

Released onDecember 13, 2011

LanguageEnglish

Description

Symptom

In rare circumstances, the favorite handling of Internet Explorer (IE) leads to unexpected behavior in the application.

Solution

This behavior is reproducible only with the favorites from a specific machine. Microsoft recommends using an additional meta tag to address the issue. Please implement the attached correction instructions provided in this SAP Note.

Reason and prerequisites

IE favorites copied from older Windows versions can cause unexpected behavior when used within the application.

CVSS

Score 0

References

SAP Note 1302283 – WebCUIF: IE8 Compatibility (Component: CA-WUI-UI-TAG)
SAP Note 1358871 – IE8 support in CRMUIF 60 and WEBCUIF 70 (Component: CA-WUI-UI-TAG)
SAP Note 1583618 – Quick WEBCUIF support for IE9 browsers (Component: CA-WUI-UI)

Full note on SAP: SAP Support Launchpad note 1635593

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Internet Explorer #IE Favorites #CRM-FRW-AFP #Browser Compatibility