Description (CNA)
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver (SAP Basis) | affected = 7.02; affected = 7.30; affected = 7.31; affected = 7.40 |
| SAP SE / SAP ABAP Platform (SAP Basis) | affected = 7.50; affected = 7.51; affected = 7.52; affected = 7.53; affected = 7.54 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812
- https://launchpad.support.sap.com/#/notes/2880744
ADP enrichment
No English description supplied.