SAP Supplier Relationship Management 'umTestSSO.jsp' Open Redirection Vulnerability

Bugtraq ID:	67997
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 28 2014 12:00AM
Updated:	May 28 2014 12:00AM
Credit:	Enrico Milanese
Vulnerable:
Not Vulnerable:

SAP Supplier Relationship Management 'umTestSSO.jsp' Open Redirection Vulnerability

SAP Supplier Relationship Management is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.

Supplier Relationship Management 673 SP0 is vulnerable; other versions may also be affected.

SAP Supplier Relationship Management 'umTestSSO.jsp' Open Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

The following example URI is available:

http://www.example.com/srm/la/umTestSSO.jsp?url==[Open Redirection]

SAP Supplier Relationship Management 'umTestSSO.jsp' Open Redirection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SAP Supplier Relationship Management 'umTestSSO.jsp' Open Redirection Vulnerability

References:

• Vendor Homepage (SAP)