High priority
SAP security note 1661780, "Unauthorized Modification of Displayed Content in PLM-CFO", is a note released on May 8, 2012. Below are the symptom and SAP recommended solution.
Description
Symptom
The PLM-CFO can be exploited by a malicious user to modify displayed application content without authorization and potentially obtain authentication information from other legitimate users.
Solution
Implement the program corrections provided in the Correction Instructions tab of this note. Ensure that all corrections are properly applied to your system.
Reason and prerequisites
Pages within the PLM-CFO do not sufficiently encode input and output parameters, resulting in a reflected Cross Site Scripting (XSS) vulnerability. This can allow attackers to:
- Deface or modify displayed content non-permanently.
- Steal user authentication information, enabling impersonation.
- Potentially achieve full compromise of the application’s security, especially if an administrator is targeted.
Full note on SAP: SAP Support Launchpad note 1661780
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].