SAP security note 1557996, "Update #1 to Security Note 1491867". Below are the symptom and the SAP recommended solution.
Description
Symptom
Correction instructions provided for the vulnerability Cross Site Scripting addressed in Security Note 1491867 must be corrected for the following releases:
- WEBCUIF 701
Solution
The implementation of this note is prerequisite for the system to function properly.
Reason and prerequisites
Security Note 1491867 contains correction instructions which are erroneous. The implementation of Security Notes 1491867 and 1512106 is prerequisite for applying this note.
Full note on SAP: SAP Support Launchpad note 1557996
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
