SAP BusinessObjects URI Redirection and Cross Site Scripting Vulnerabilities

Bugtraq ID:	37972
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 27 2010 12:00AM
Updated:	Jan 27 2010 12:00AM
Credit:	Richard Brain of ProCheckUp Ltd.
Vulnerable:	SAP Business Objects 12.1 SAP Business Objects 12.0
Not Vulnerable:

SAP BusinessObjects URI Redirection and Cross Site Scripting Vulnerabilities

SAP BusinessObjects is prone to multiple URI-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input.

Attackers can exploit these issues to execute arbitrary script or HTML code, steal cookie-based authentication credentials, and conduct phishing attacks. Other attacks may also be possible.

SAP BusinessObjects URI Redirection and Cross Site Scripting Vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting victim into following a malicious URI.

The following example URIs are available:

• /data/vulnerabilities/exploits/37972.txt

SAP BusinessObjects URI Redirection and Cross Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SAP BusinessObjects URI Redirection and Cross Site Scripting Vulnerabilities

References:

• PR09-02 Multiple Cross-Site Scripting (XSS) / Cross Domain redirects and Server (ProCheckUp)
  
• SAP Homepage (SAP)