Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

October 19, 2017
5:45 am

Whitelist based Clickjacking Framing Protection in NWBC for HTML, SAP security note 2319174

Description

NWBC for HTML does not protect its applications against Clickjacking attacks.

Available fix and Supported packages

SAP_UI | 740 | 740
SAP_BASIS | 700 | 702
SAP_BASIS | 711 | 711
SAP_BASIS | 730 | 730
SAP_BASIS | 731 | 731
SAP_BASIS 731 | SAPKB73119 |

Affected component

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/2319174

TAGS

#UI-redressing-attack
#Clickjacking
#Framing-Protection
#Framing
#IFrame
#UI-Redressing
#Clickjacking-Whitelist
#X-FRAME-OPTIONS
#NWBC-for-HTML

More to explorer

Time to give back, RedRays

RedRays Offers Support to Startups Listing on SAP Store

February 26, 2023

RedRays is a startup that was founded in January 2021. Throughout our journey, we have been fortunate to receive support and guidance

Threat Modeling: An Overview of PASTA Methodology

February 23, 2023

I would like to briefly introduce the Threat Modeling methodology in this blog post. This will be the initial part of the

SAP Security Patch Day – February 2023

February 14, 2023

SAP Security Patch Day is a monthly event during which SAP releases security updates for their software products. These updates address potential

3242933 – [CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution

October 12, 2022

General information Risk: CRITICAL Versions Affected:SAP MFG EXECUTION CORE 15.1SAP MFG EXECUTION CORE 15.2SAP MFG EXECUTION CORE 15.3Vendor URL: https://sap.comBug: File path traversal