Zenoss Monitoring System HTML Injection and Open redirection Vulnerabilities
BID:67396
Info
Zenoss Monitoring System HTML Injection and Open redirection Vulnerabilities
| Bugtraq ID: | 67396 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-3738 CVE-2014-3739 |
| Remote: | Yes |
| Local: | No |
| Published: | May 14 2014 12:00AM |
| Updated: | May 16 2014 12:52AM |
| Credit: | Dolev Farhi |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Zenoss Monitoring System HTML Injection and Open redirection Vulnerabilities
Zenoss Monitoring System is prone to HTML-injection and open-redirection vulnerabilities.
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user and for open-redirection by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are also possible.
Zenoss Monitoring System 4.2.5 is vulnerable; other versions may also affected.
Zenoss Monitoring System is prone to HTML-injection and open-redirection vulnerabilities.
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user and for open-redirection by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are also possible.
Zenoss Monitoring System 4.2.5 is vulnerable; other versions may also affected.
Exploit / POC
Zenoss Monitoring System HTML Injection and Open redirection Vulnerabilities
Attackers can exploit these issues using browser. An attacker can exploit open-redirection issue by enticing an unsuspecting victim to follow a malicious URI.
The following example URI is available:
http://example.com/zport/acl_users/cookieAuthHelper/login_form?came_from=[http://malicious-website.com]
Attackers can exploit these issues using browser. An attacker can exploit open-redirection issue by enticing an unsuspecting victim to follow a malicious URI.
The following example URI is available:
http://example.com/zport/acl_users/cookieAuthHelper/login_form?came_from=[http://malicious-website.com]
Solution / Fix
Zenoss Monitoring System HTML Injection and Open redirection Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Zenoss Monitoring System HTML Injection and Open redirection Vulnerabilities
References:
References: