Description (CNA)
The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA XS advanced model) allows an unauthenticated attacker to craft a malicious link, that, when clicked by a victim, redirects the browser to a malicious site due to insufficient redirect URL validation. On successful exploitation attacker can cause limited impact on confidentiality, integrity, and availability of the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP HANA extended application services, advanced model (User Account and Authentication Services) | affected SAP_EXTENDED_APP_SERVICES 1 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No references supplied.