SAP TAF_APPLAUNCHER Business Server Pages Open Redirect Vulnerability

A vulnerability in SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to create malicious links that, when clicked by a victim, redirect them to attacker-controlled sites. This could potentially expose or alter sensitive information in the victim's browser. The vulnerability has a low impact on confidentiality and integrity, with no effect on the application's availability.

Impact

Exploitation of this vulnerability could lead to an open redirect, allowing attackers to redirect victims to malicious sites, potentially compromising sensitive information.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.