sisqualWFM up to 7.1.319.111 on Android HTTP Host Header core injection

Summaryinfo

A vulnerability identified as problematic has been detected in sisqualWFM up to 7.1.319.111 on Android. This affects an unknown function of the file /sisqualIdentityServer/core/ of the component HTTP Host Header Handler. Performing a manipulation results in injection. This vulnerability was named CVE-2023-36085. In addition, an exploit is available.

Detailsinfo

A vulnerability, which was classified as problematic, was found in sisqualWFM up to 7.1.319.111 on Android (Android App Software). This affects some unknown functionality of the file /sisqualIdentityServer/core/ of the component HTTP Host Header Handler. The manipulation with an unknown input leads to a injection vulnerability. CWE is classifying the issue as CWE-74. The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. This is going to have an impact on integrity. The summary by CVE is:

The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources.

The weakness was presented 10/25/2023. The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2023-36085 since 06/21/2023. Technical details and a public exploit are known. MITRE ATT&CK project uses the attack technique T1055 for this issue.

The exploit is shared for download at github.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Android App Software

Name

• sisqualWFM

Version

• 7.1.319.111

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion