Unauthorized modification of displayed content in SEM-CPM, SAP security note 1592757

SAP security note 1592757, "Unauthorized modification of displayed content in SEM-CPM", is a program error note released on September 13, 2011. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

A malicious user can exploit SEM-CPM to:

• Modify application content without authorization.
• Potentially obtain authentication information from other users.

This can lead to impersonation and full compromise of the application’s security.

Solution

Apply the correction instructions provided in this note using transaction SNOTE.

CVSS

Score 4.3 Vector: AV:N/AC:M/AU:N/C:N/I:P/A:N

Affected components

• FIN-SEM-CPM (versions 400, 600, 602, 603, 604, 605, 634, 700)