Apache Guacamole prior 1.0.0 Cookie Flag information disclosure

Summaryinfo

A vulnerability identified as problematic has been detected in Apache Guacamole. This issue affects some unknown processing of the component Cookie Handler. Performing a manipulation results in information disclosure (Flag). This vulnerability is cataloged as CVE-2018-1340. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Apache Guacamole. This affects some unknown functionality of the component Cookie Handler. The manipulation with an unknown input leads to a information disclosure vulnerability (Flag). CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain.

The bug was discovered 01/23/2019. The weakness was shared 02/07/2019 (Website). The advisory is shared at securityfocus.com. This vulnerability is uniquely identified as CVE-2018-1340 since 12/07/2017. The exploitability is told to be difficult. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

The vulnerability was handled as a non-public zero-day exploit for at least 15 days. During that time the estimated underground price was around $5k-$25k. The commercial vulnerability scanner Qualys is able to test this issue with plugin 277745 (Fedora Security Update for guacamole-server (FEDORA-2019-c692dd910d)).

Upgrading to version 1.0.0 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Apache

Name

• Guacamole

License

• open-source

Website

• Vendor: https://www.apache.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion