OpenWFE Remote Cross-Site Scripting And Connection Proxy Vulnerabilities

Bugtraq ID:	11514
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 25 2004 12:00AM
Updated:	Oct 25 2004 12:00AM
Credit:	Discovery of these issues is credited to Joxean Koret <[email protected]>.
Vulnerable:	OpenWFE Work Flow Engine 1.4.5 OpenWFE Work Flow Engine 1.4.4 OpenWFE Work Flow Engine 1.4.3 OpenWFE Work Flow Engine 1.4.2 OpenWFE Work Flow Engine 1.4.1 OpenWFE Work Flow Engine 1.4
Not Vulnerable:	OpenWFE Work Flow Engine 1.4.6

OpenWFE Remote Cross-Site Scripting And Connection Proxy Vulnerabilities

OpenWFE is affected by a cross-site scripting and connection proxy vulnerability. These issues are due to a failure of the application to properly sanitize user-supplied input.

An attacker may leverage the cross-site scripting issue to steal cookie-based authentication credentials as well as carry out other attacks by executing client-based script code in an unsuspecting user's browser. An attacker may leverage the connection proxy issue to scan arbitrary network computers anonymously, facilitating further attacks.

OpenWFE Remote Cross-Site Scripting And Connection Proxy Vulnerabilities

No exploit is required to leverage these issues. The following proof of concepts have been provided:

To leverage the cross-site scripting issue:
rmi://www.example.com:7080/workSessionServer"><script>alert(document.cookie)</script>

To leverage the connection proxy issue:
rmi://<targetHostName>:<targetPort>/workSessionServer

OpenWFE Remote Cross-Site Scripting And Connection Proxy Vulnerabilities

Solution:
The vendor has released an upgrade dealing with these issues. Please contact the vendor for upgrade availability.

OpenWFE Remote Cross-Site Scripting And Connection Proxy Vulnerabilities

References:

• OpenWFE Change Log (OpenWFE)
  
• OpenWFE Project Page (OpenWFE)
  
• Two Vulnerabilities in OpenWFE Web Client (Joxean Koret )