SAP Fiori for SAP ERP Host Header Injection Vulnerability Allowing OData Cache Poisoning

A vulnerability exists in the SAP OData endpoint within SAP Fiori for SAP ERP, where cached values can be poisoned by altering the Host header in an HTTP GET request. This manipulation could redirect the 'atom:link' values in the metadata response from the SAP server to a malicious link specified by the attacker. Exploitation of this vulnerability could lead to a low integrity impact on the application.

Impact

Exploitation of this vulnerability could cause a low impact on the application's integrity.

Remediation

Users are advised to review and implement the SAP Security Note related to this vulnerability, available through the SAP for Me platform. SAP Security Patch Days occur on the second Tuesday of each month, when SAP publishes important security updates.