SAP security note 1700195, “Unauthorized modification of displayed content in BW-BCT-PSM”. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
An attacker can abuse BW-BCT-PSM to modify application content without authorization and potentially obtain authentication details from other users. This can lead to impersonation of users, including administrators, thereby compromising the security of the application.
Solution
To mitigate this vulnerability, implement the SAP Security Note 1700195.
Reason and prerequisites
The vulnerability arises because pages within BW-BCT-PSM do not sufficiently encode input parameters, resulting in a reflected XSS issue. Exploiting this can allow attackers to deface or modify displayed content and steal user authentication data.
Affected components
- BI_CONT 330
- BI_CONT 353
- BI_CONT 702
- BI_CONT 703
- BI_CONT 704
- BI_CONT 705
- BI_CONT 706
- BI_CONT 707
- BI_CONT 711
- BI_CONT 724
- BI_CONT 735
- BI_CONT 736
- BI_CONT 746
Full note on SAP: SAP Support Launchpad note 1700195
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].