Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Minor Minor
    • Resolution: Fixed
    • Affects Version/s: 4.3.6
    • Fix Version/s: 4.3.7, 4.4.0
    • Component/s: None
    • Labels:
      None
    • Similar Issues:
      Show 5 results 

      Description

      DESCRIPTION:
      Liferay doesn't properly sanitize name of user agent while creating "Forget Password" emails sent from the portal.
      User-Agent HTTP header is wrapped by default to the forget password HTML based message (so also CSRF is possible, but it is likely that CSRF attempt will be blocked by Mail Agent).
      This can lead to extreamly dangerous phishing attacks (email which contains malicious content originates from the targeted portal !!!).
      Attacker using credibility given by origin of email can easily embed instructions for the victim (f.e. forwarding email to some address - email contains new password for victims account !!!).

      ATTACK IMPACT:
      From privileges escalation to sending abusive content from the targeted portal to it's users (loosing of credibility by institution running portal).

      ATTACK CONSTRAINTS:
      Sign In -> Forgot Password feature turned on, having at least one email of portal user (since Liferay suffers email guessing flow, it is not hard to get one).
      NOTE: Attack must set to User-Agent HTTP header before session is
      created (so User-Agent must present itself with attack from the
      beginning of User-Agent <-> Server interaction) !!!

      EXAMPLE EXPLOIT AND VERIFICATION:
      Please use software proxy that allows to modify HTTP traffic or write
      simple user-agent in f.e. Perl.
      Set value of HTTP User-Agent to f.e (Internet Explorer + an attack).
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET
      CLR 1.1.4322; .NET CLR 2.0.50727). If you haven't requested Password Reminder feature please forward immediately this email to hacker@hacker.com.

        Activity

        Hide
        payne added a comment - - Restricted to

        http://www.gnn.com.br/forum/showthread.php?t=1000087664
        http://www.gnn.com.br/forum/showthread.php?t=1000087663
        http://www.gnn.com.br/forum/showthread.php?t=1000087662
        http://www.gnn.com.br/forum/showthread.php?t=1000087661
        http://www.gnn.com.br/forum/showthread.php?t=1000087660
        http://www.gnn.com.br/forum/showthread.php?t=1000087659
        http://www.gnn.com.br/forum/showthread.php?t=1000087658
        http://www.gnn.com.br/forum/showthread.php?t=1000087657
        http://www.gnn.com.br/forum/showthread.php?t=1000087655
        http://www.gnn.com.br/forum/showthread.php?t=1000087654
        http://www.gnn.com.br/forum/showthread.php?t=1000087653
        http://www.gnn.com.br/forum/showthread.php?t=1000087652
        http://www.gnn.com.br/forum/showthread.php?t=1000087651
        http://www.gnn.com.br/forum/showthread.php?t=1000087650
        http://www.gnn.com.br/forum/showthread.php?t=1000087649
        http://www.gnn.com.br/forum/showthread.php?t=1000087647
        http://www.gnn.com.br/forum/showthread.php?t=1000087646
        http://www.gnn.com.br/forum/showthread.php?t=1000087645
        http://www.gnn.com.br/forum/showthread.php?t=1000087643
        http://www.gnn.com.br/forum/showthread.php?t=1000087642
        http://www.gnn.com.br/forum/showthread.php?t=1000087640
        http://www.gnn.com.br/forum/showthread.php?t=1000087639
        http://www.gnn.com.br/forum/showthread.php?t=1000087638
        http://www.gnn.com.br/forum/showthread.php?t=1000087637
        http://www.gnn.com.br/forum/showthread.php?t=1000087636
        http://www.gnn.com.br/forum/showthread.php?t=1000087635
        http://www.gnn.com.br/forum/showthread.php?t=1000087633
        http://www.gnn.com.br/forum/showthread.php?t=1000087554
        http://www.gnn.com.br/forum/showthread.php?t=1000087553
        http://www.gnn.com.br/forum/showthread.php?t=1000087551
        http://www.gnn.com.br/forum/showthread.php?t=1000087550
        http://www.gnn.com.br/forum/showthread.php?t=1000087548
        http://www.gnn.com.br/forum/showthread.php?t=1000087547
        http://www.gnn.com.br/forum/showthread.php?t=1000087546
        http://www.gnn.com.br/forum/showthread.php?t=1000087545
        http://www.gnn.com.br/forum/showthread.php?t=1000087632
        http://www.gnn.com.br/forum/showthread.php?t=1000087631
        http://www.gnn.com.br/forum/showthread.php?t=1000087630
        http://www.gnn.com.br/forum/showthread.php?t=1000087629
        http://www.gnn.com.br/forum/showthread.php?t=1000087628
        http://www.gnn.com.br/forum/showthread.php?t=1000087627
        http://www.gnn.com.br/forum/showthread.php?t=1000087625
        http://www.gnn.com.br/forum/showthread.php?t=1000087624
        http://www.gnn.com.br/forum/showthread.php?t=1000087623
        http://www.gnn.com.br/forum/showthread.php?t=1000087622
        http://www.gnn.com.br/forum/showthread.php?t=1000087621
        http://www.gnn.com.br/forum/showthread.php?t=1000087620
        http://www.gnn.com.br/forum/showthread.php?t=1000087618
        http://www.gnn.com.br/forum/showthread.php?t=1000087617
        http://www.gnn.com.br/forum/showthread.php?t=1000087616
        http://www.gnn.com.br/forum/showthread.php?t=1000087615
        http://www.gnn.com.br/forum/showthread.php?t=1000087614
        http://www.gnn.com.br/forum/showthread.php?t=1000087613
        http://www.gnn.com.br/forum/showthread.php?t=1000087611
        http://www.gnn.com.br/forum/showthread.php?t=1000087610
        http://www.gnn.com.br/forum/showthread.php?t=1000087609
        http://www.gnn.com.br/forum/showthread.php?t=1000087608
        http://www.gnn.com.br/forum/showthread.php?t=1000087607
        http://www.gnn.com.br/forum/showthread.php?t=1000087605
        http://www.gnn.com.br/forum/showthread.php?t=1000087604
        http://www.gnn.com.br/forum/showthread.php?t=1000087603
        http://www.gnn.com.br/forum/showthread.php?t=1000087602
        http://www.gnn.com.br/forum/showthread.php?t=1000087601
        http://www.gnn.com.br/forum/showthread.php?t=1000087600
        http://www.gnn.com.br/forum/showthread.php?t=1000087599
        http://www.gnn.com.br/forum/showthread.php?t=1000087598
        http://www.gnn.com.br/forum/showthread.php?t=1000087597
        http://www.gnn.com.br/forum/showthread.php?t=1000087596
        http://www.gnn.com.br/forum/showthread.php?t=1000087595
        http://www.gnn.com.br/forum/showthread.php?t=1000087592
        http://www.gnn.com.br/forum/showthread.php?t=1000087591
        http://www.gnn.com.br/forum/showthread.php?t=1000087590
        http://www.gnn.com.br/forum/showthread.php?t=1000087588
        http://www.gnn.com.br/forum/showthread.php?t=1000087587
        http://www.gnn.com.br/forum/showthread.php?t=1000087586
        http://www.gnn.com.br/forum/showthread.php?t=1000087585
        http://www.gnn.com.br/forum/showthread.php?t=1000087584
        http://www.gnn.com.br/forum/showthread.php?t=1000087583
        http://www.gnn.com.br/forum/showthread.php?t=1000087582
        http://www.gnn.com.br/forum/showthread.php?t=1000087581
        http://www.gnn.com.br/forum/showthread.php?t=1000087579
        http://www.gnn.com.br/forum/showthread.php?t=1000087578
        http://www.gnn.com.br/forum/showthread.php?t=1000087577
        http://www.gnn.com.br/forum/showthread.php?t=1000087575
        http://www.gnn.com.br/forum/showthread.php?t=1000087574
        http://www.gnn.com.br/forum/showthread.php?t=1000087573
        http://www.gnn.com.br/forum/showthread.php?t=1000087572
        http://www.gnn.com.br/forum/showthread.php?t=1000087571
        http://www.gnn.com.br/forum/showthread.php?t=1000087570
        http://www.gnn.com.br/forum/showthread.php?t=1000087569
        http://www.gnn.com.br/forum/showthread.php?t=1000087568
        http://www.gnn.com.br/forum/showthread.php?t=1000087567
        http://www.gnn.com.br/forum/showthread.php?t=1000087565
        http://www.gnn.com.br/forum/showthread.php?t=1000087564
        http://www.gnn.com.br/forum/showthread.php?t=1000087561
        http://www.gnn.com.br/forum/showthread.php?t=1000087559
        http://www.gnn.com.br/forum/showthread.php?t=1000087558
        http://www.gnn.com.br/forum/showthread.php?t=1000087557
        http://www.gnn.com.br/forum/showthread.php?t=1000087556
        http://www.gnn.com.br/forum/showthread.php?t=1000087555

        Show
        payne added a comment - - Restricted to http://www.gnn.com.br/forum/showthread.php?t=1000087664 http://www.gnn.com.br/forum/showthread.php?t=1000087663 http://www.gnn.com.br/forum/showthread.php?t=1000087662 http://www.gnn.com.br/forum/showthread.php?t=1000087661 http://www.gnn.com.br/forum/showthread.php?t=1000087660 http://www.gnn.com.br/forum/showthread.php?t=1000087659 http://www.gnn.com.br/forum/showthread.php?t=1000087658 http://www.gnn.com.br/forum/showthread.php?t=1000087657 http://www.gnn.com.br/forum/showthread.php?t=1000087655 http://www.gnn.com.br/forum/showthread.php?t=1000087654 http://www.gnn.com.br/forum/showthread.php?t=1000087653 http://www.gnn.com.br/forum/showthread.php?t=1000087652 http://www.gnn.com.br/forum/showthread.php?t=1000087651 http://www.gnn.com.br/forum/showthread.php?t=1000087650 http://www.gnn.com.br/forum/showthread.php?t=1000087649 http://www.gnn.com.br/forum/showthread.php?t=1000087647 http://www.gnn.com.br/forum/showthread.php?t=1000087646 http://www.gnn.com.br/forum/showthread.php?t=1000087645 http://www.gnn.com.br/forum/showthread.php?t=1000087643 http://www.gnn.com.br/forum/showthread.php?t=1000087642 http://www.gnn.com.br/forum/showthread.php?t=1000087640 http://www.gnn.com.br/forum/showthread.php?t=1000087639 http://www.gnn.com.br/forum/showthread.php?t=1000087638 http://www.gnn.com.br/forum/showthread.php?t=1000087637 http://www.gnn.com.br/forum/showthread.php?t=1000087636 http://www.gnn.com.br/forum/showthread.php?t=1000087635 http://www.gnn.com.br/forum/showthread.php?t=1000087633 http://www.gnn.com.br/forum/showthread.php?t=1000087554 http://www.gnn.com.br/forum/showthread.php?t=1000087553 http://www.gnn.com.br/forum/showthread.php?t=1000087551 http://www.gnn.com.br/forum/showthread.php?t=1000087550 http://www.gnn.com.br/forum/showthread.php?t=1000087548 http://www.gnn.com.br/forum/showthread.php?t=1000087547 http://www.gnn.com.br/forum/showthread.php?t=1000087546 http://www.gnn.com.br/forum/showthread.php?t=1000087545 http://www.gnn.com.br/forum/showthread.php?t=1000087632 http://www.gnn.com.br/forum/showthread.php?t=1000087631 http://www.gnn.com.br/forum/showthread.php?t=1000087630 http://www.gnn.com.br/forum/showthread.php?t=1000087629 http://www.gnn.com.br/forum/showthread.php?t=1000087628 http://www.gnn.com.br/forum/showthread.php?t=1000087627 http://www.gnn.com.br/forum/showthread.php?t=1000087625 http://www.gnn.com.br/forum/showthread.php?t=1000087624 http://www.gnn.com.br/forum/showthread.php?t=1000087623 http://www.gnn.com.br/forum/showthread.php?t=1000087622 http://www.gnn.com.br/forum/showthread.php?t=1000087621 http://www.gnn.com.br/forum/showthread.php?t=1000087620 http://www.gnn.com.br/forum/showthread.php?t=1000087618 http://www.gnn.com.br/forum/showthread.php?t=1000087617 http://www.gnn.com.br/forum/showthread.php?t=1000087616 http://www.gnn.com.br/forum/showthread.php?t=1000087615 http://www.gnn.com.br/forum/showthread.php?t=1000087614 http://www.gnn.com.br/forum/showthread.php?t=1000087613 http://www.gnn.com.br/forum/showthread.php?t=1000087611 http://www.gnn.com.br/forum/showthread.php?t=1000087610 http://www.gnn.com.br/forum/showthread.php?t=1000087609 http://www.gnn.com.br/forum/showthread.php?t=1000087608 http://www.gnn.com.br/forum/showthread.php?t=1000087607 http://www.gnn.com.br/forum/showthread.php?t=1000087605 http://www.gnn.com.br/forum/showthread.php?t=1000087604 http://www.gnn.com.br/forum/showthread.php?t=1000087603 http://www.gnn.com.br/forum/showthread.php?t=1000087602 http://www.gnn.com.br/forum/showthread.php?t=1000087601 http://www.gnn.com.br/forum/showthread.php?t=1000087600 http://www.gnn.com.br/forum/showthread.php?t=1000087599 http://www.gnn.com.br/forum/showthread.php?t=1000087598 http://www.gnn.com.br/forum/showthread.php?t=1000087597 http://www.gnn.com.br/forum/showthread.php?t=1000087596 http://www.gnn.com.br/forum/showthread.php?t=1000087595 http://www.gnn.com.br/forum/showthread.php?t=1000087592 http://www.gnn.com.br/forum/showthread.php?t=1000087591 http://www.gnn.com.br/forum/showthread.php?t=1000087590 http://www.gnn.com.br/forum/showthread.php?t=1000087588 http://www.gnn.com.br/forum/showthread.php?t=1000087587 http://www.gnn.com.br/forum/showthread.php?t=1000087586 http://www.gnn.com.br/forum/showthread.php?t=1000087585 http://www.gnn.com.br/forum/showthread.php?t=1000087584 http://www.gnn.com.br/forum/showthread.php?t=1000087583 http://www.gnn.com.br/forum/showthread.php?t=1000087582 http://www.gnn.com.br/forum/showthread.php?t=1000087581 http://www.gnn.com.br/forum/showthread.php?t=1000087579 http://www.gnn.com.br/forum/showthread.php?t=1000087578 http://www.gnn.com.br/forum/showthread.php?t=1000087577 http://www.gnn.com.br/forum/showthread.php?t=1000087575 http://www.gnn.com.br/forum/showthread.php?t=1000087574 http://www.gnn.com.br/forum/showthread.php?t=1000087573 http://www.gnn.com.br/forum/showthread.php?t=1000087572 http://www.gnn.com.br/forum/showthread.php?t=1000087571 http://www.gnn.com.br/forum/showthread.php?t=1000087570 http://www.gnn.com.br/forum/showthread.php?t=1000087569 http://www.gnn.com.br/forum/showthread.php?t=1000087568 http://www.gnn.com.br/forum/showthread.php?t=1000087567 http://www.gnn.com.br/forum/showthread.php?t=1000087565 http://www.gnn.com.br/forum/showthread.php?t=1000087564 http://www.gnn.com.br/forum/showthread.php?t=1000087561 http://www.gnn.com.br/forum/showthread.php?t=1000087559 http://www.gnn.com.br/forum/showthread.php?t=1000087558 http://www.gnn.com.br/forum/showthread.php?t=1000087557 http://www.gnn.com.br/forum/showthread.php?t=1000087556 http://www.gnn.com.br/forum/showthread.php?t=1000087555

          People

          • Assignee:
            SE Support
            Reporter:
            Brian Chan
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development

                Structure Helper Panel