SAP security note 1535183, "Unauthorized usage of appl. functionality in PY-US-PS", is a program error note released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A malicious user can trigger functionality in PY-US-PS without authentication and authorization.
Solution
Due to a legal change, the affected BSP is no longer valid after 31.12.2010. It is switched off with note 1530008. To implement a correction to the security issue, please apply note 1530008 or the corresponding support package.
Reason and prerequisites
PY-US-PS executes certain functions through referencing specific URLs. When an attacker tricks an authenticated user's browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the user.
If present, the attacker may use a Cross Site Scripting attack to trigger the exploit, or use an approach in which a link to click is presented to the victim.
References
This note refers to
Affected components
- SAP_HR 46C
- SAP_HRCUS 470
- SAP_HRCUS 500
- SAP_HRCUS 600
- SAP_HRCUS 604
Full note on SAP: SAP Support Launchpad note 1535183
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
