SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as a parameter in the application URL and share it with the end user who could potentially become a victim of the attack.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/163136/SAP-Solution-Manager-7.2-ST-720-Open-Redirection.html | Third Party Advisory |
| http://seclists.org/fulldisclosure/2021/Jun/25 | Mailing List Third Party Advisory |
| https://launchpad.support.sap.com/#/notes/2938650 | Permissions Required Vendor Advisory |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 | Vendor Advisory |
Configurations
History
17 Jun 2021, 17:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) http://packetstormsecurity.com/files/163136/SAP-Solution-Manager-7.2-ST-720-Open-Redirection.html - Third Party Advisory | |
| References | (MISC) https://launchpad.support.sap.com/#/notes/2938650 - Permissions Required, Vendor Advisory | |
| References | (FULLDISC) http://seclists.org/fulldisclosure/2021/Jun/25 - Mailing List, Third Party Advisory |
15 Jun 2021, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Jun 2021, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2020-12-09 17:15
Updated : 2024-02-04 21:23
NVD link : CVE-2020-26836
Mitre link : CVE-2020-26836
CVE.ORG link : CVE-2020-26836
JSON object : View
Products Affected
sap
- solution_manager
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')