SAP Security Note
High priority
SAP security note 1628849, "Unauthorized modification of stored content in WEBCUIF", is a note released on 07.01.2013. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
WEBCUIF can be exploited by an attacker to modify application content, persist the changes without authorization, and potentially obtain authentication information from other legitimate users.
Solution
Install the corresponding support package or implement the correction instructions provided below and follow the manual steps.
Reason and prerequisites
WEBCUIF leads to a stored cross-site scripting vulnerability. This allows attackers to permanently alter displayed content on a website, embedding content that is automatically rendered without needing to target individual victims. Additionally, stored XSS can be used to steal users’ authentication information, such as session data. If an attacker gains access to this data, they can impersonate the user and access information with the same permissions. Impersonating an administrator can fully compromise the application’s security.
Affected components
- CRMUIF: Versions 520 and 600
- WEBCUIF: Versions 700, 701, 730, 746
Full note on SAP: SAP Support Launchpad note 1628849
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
