Authentication Bypass (Forced Browse)

critical Nessus Plugin ID 121038

Language:

Synopsis

It is possible to gain authentication from the web application by browsing to a specific page.

Description

When browsing to a specific page the remote web application sets an authenication cookie that allows the user to access authenticated portions of the web application.

Solution

Prevent the web application from updating the authentication cookies to a new user unless a login is successfully performed.

Plugin Details

Severity: Critical

ID: 121038

File Name: force_browse_authentication_bypass.nbin

Version: 1.60

Type: remote

Family: CGI abuses

Published: 1/9/2019

Updated: 9/3/2024

Supported Sensors: Nessus

Risk Information

CVSS Score Rationale: Authentication bypass score

CVSS v2

Risk Factor: High

Base Score: 9.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N

CVSS Score Source: manual

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vulnerability Information

Required KB Items: Settings/enable_web_app_tests

Detections

Analytics