PT-2021-20274

CVE-2021-33697

·

Published

2021-09-15

·

Updated

2022-04-25

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform (SAPUI5) versions 420, 430
Description: The issue allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities. This occurs under certain conditions, potentially affecting users of the SAP BusinessObjects Business Intelligence Platform.
Recommendations: For versions 420 and 430, consider implementing additional security measures to prevent reverse tabnabbing attacks, such as validating user input and ensuring proper URL handling. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-1022: Use of Web Link to Untrusted Target with window.opener Access
CWE-269: Improper Privilege Management
Related identifiers
CVE-2021-33697
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com