Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Infrastructure | Sap | 1.0 (including) | 1.0 (including) |
| Ui | Sap | 2.0 (including) | 2.0 (including) |
| Ui | Sap | 7.4 (including) | 7.4 (including) |
| Ui | Sap | 7.5 (including) | 7.5 (including) |
| Ui | Sap | 7.51 (including) | 7.51 (including) |
| Ui | Sap | 7.52 (including) | 7.52 (including) |
References
- http://www.securityfocus.com/bid/104446
- https://launchpad.support.sap.com/#/notes/2621121
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
- http://www.securityfocus.com/bid/104446
- https://launchpad.support.sap.com/#/notes/2621121
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255