SAP security note 1675153, "Unauthorized modification of displayed content in BW-BCT-PLA." Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
BW-BCT-PLA-RAP can be abused by an attacker, allowing them to modify displayed application content without authorization, and potentially obtain authentication information from other legitimate users.
Solution
Implement the attached correction instructions provided in the SAP Note. Additionally, ensure that the following prerequisite SAP Notes are implemented:
Reason and prerequisites
The function module UPARM_ADD_VIEW_TO_XML_STRING within BW-BCT-PLA-RAP does not sufficiently encode input parameters by utilizing the current XSS library methods for URL encoding. This results in a general cross-site scripting vulnerability. An attacker who gains access to this data may impersonate the user and access all information with the same rights as the target user. If an administrator is impersonated, the security of the application may be fully compromised.
References
Affected components
- BI_CONT 705
- BI_CONT 706
- BI_CONT 707
- BI_CONT 735
- BI_CONT 736
- BI_CONT 746
Full note on SAP: SAP Support Launchpad note 1675153
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
