Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Whitelist based Clickjacking Framing Protection in HTMLB Java, SAP security note 2263656

Description

HTMLB does not protect its applications against Clickjacking attacks.

Available fix and Supported packages

  • EPBC2 | 7.00 | 7.02
  • LM-TOOLS | 7.00 | 7.02
  • SAP_JTECHS | 7.00 | 7.02
  • EP-BASIS | 7.10 | 7.11
  • EP-BASIS | 7.30 | 7.30
  • EP-BASIS | 7.31 | 7.31
  • EP-BASIS | 7.40 | 7.40
  • EP-BASIS | 7.50 | 7.50
  • LMNWAUIFRMRK | 7.10 | 7.11
  • LMNWAUIFRMRK | 7.30 | 7.30
  • LMNWAUIFRMRK | 7.31 | 7.31
  • LMNWAUIFRMRK | 7.40 | 7.40
  • LMNWAUIFRMRK | 7.50 | 7.50
  • FRAMEWORK-EXT | 7.30 | 7.30
  • FRAMEWORK-EXT | 7.31 | 7.31
  • FRAMEWORK-EXT | 7.40 | 7.40
  • FRAMEWORK-EXT | 7.50 | 7.50
  • FRAMEWORK | 7.10 | 7.11
  • FRAMEWORK EXTENSIONS 7.30 | SP014 | 000006
  • FRAMEWORK EXTENSIONS 7.30 | SP015 | 000002
  • FRAMEWORK EXTENSIONS 7.30 | SP016 | 000000
  • FRAMEWORK EXTENSIONS 7.30 | SP017 | 000000
  • FRAMEWORK EXTENSIONS 7.31 | SP017 | 000008
  • FRAMEWORK EXTENSIONS 7.31 | SP018 | 000002
  • FRAMEWORK EXTENSIONS 7.31 | SP019 | 000000
  • FRAMEWORK EXTENSIONS 7.40 | SP012 | 000008
  • FRAMEWORK EXTENSIONS 7.40 | SP013 | 000002
  • FRAMEWORK EXTENSIONS 7.40 | SP014 | 000000
  • FRAMEWORK EXTENSIONS 7.50 | SP002 | 000003
  • FRAMEWORK EXTENSIONS 7.50 | SP003 | 000002
  • FRAMEWORK EXTENSIONS 7.50 | SP004 | 000000
  • FRAMEWORK EXTENSIONS 7.50 | SP005 | 000000
  • JAVA FRAMEWORK OFFLINE 7.10 | SP020 | 000007
  • JAVA FRAMEWORK OFFLINE 7.10 | SP021 | 000000
  • JAVA FRAMEWORK OFFLINE 7.10 | SP022 | 000000
  • JAVA FRAMEWORK OFFLINE 7.11 | SP016 | 000000
  • JAVA FRAMEWORK OFFLINE 7.11 | SP017 | 000000
  • JAVA FRAMEWORK OFFLINE 7.20 | SP009 | 000020

Affected component

    EP-PDK-HBJ
    HTMLB Business for Java

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/2263656

TAGS

#UI-redressing-attack
#Clickjacking
#Framing-Protection
#Framing
#IFrame
#UI-Redressing
#Clickjacking-Whitelist
#X-FRAME-OPTIONS
#HTMLB

More to explorer