Description
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP NetWeaver (SAP Basis) | = 7.02, = 7.30, = 7.31, = 7.40 | — |
| SAP SE | SAP ABAP Platform (SAP Basis) | = 7.50, = 7.51, = 7.52, = 7.53, = 7.54 | — |