Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Unauthorized modification of displayed content in SRM LAC, SAP security note 1475605

Description

The SRM Live auction application could be abused by a malicious user, who could modify displayed application content without authorization and potentially obtain authentication information from other legitimate users.
Due to a vulnerability that exists in the SRM Live Auction Cockpit application it is possible for a hacker to inject malicious code at runtime which can allow them to steal the current logged on user’s data and perform unauthorized actions without the knowledge of the logged in user.

Vulnerability Details:

The hacker can enter a executable HTML or JAVAScript command into the input fields and save it to the database. Once page which display this data is visited by a user for a legitimate business purpose, the JAVAScript command contained in the database will be executed thereby allowing the hacker to receive the data in the current context or modify the data in the current context or execute critical actions without the knowledge of the legitimate logged in user.

Affected Releases:

SAP SRM 7.01

Available fix and Supported packages

  • SRM_SERVER | 701 | 701
  • SRM_SERVER 701 | SAPK-70102INSRMSRV |

Affected component

    SRM-LA-UI
    User Interface

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1475605

TAGS

#Security-Note
#Security-Issue
#Security-Problem
#Vulnerability
#Exploit
#XSS
#Reflected-cross-site-scripting
#Cross-site-scripting.

Explore More

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.