Description (CNA)
Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the `atom:link` values in the returned metadata redirecting them from the SAP server to a malicious link set by the attacker. Successful exploitation could cause low impact on integrity of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP Fiori for SAP ERP | affected SAP_GWFND 740; affected 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757; affected 758 |
CWE
CWE-644
References
ADP enrichment
No English description supplied.
No references supplied.