Back to list
AirWatch Self Service Portal Username Parameter LDAP Injection
Apr 04 2017 06:48AM
Patrick Webster (patrick osisecurity com au)
AirWatch Self Service MDM
https://[target]/DeviceManagement/ URL accepts the following
The 'Username' parameter appears to be vulnerable to an LDAP injection attack.
A query of:
Takes a long time to complete (talking minutes), due to valid
injection of an LDAP query which enumerates the entire LDAP directory.
Other normal (or syntax invalid LDAP) requests are answered within
Discovered by Patrick Webster
20-Aug-2013 - Discovered during audit.
23-Aug-2013 - Reported to vendor.
26-Aug-2013 - Vendor acknowledged report.
09-Sep-2013 - Vendor confirmed.
15-Oct-2013 - Vendor released v6.5 including fix.
04-Apr-2017 - Public disclosure.
About OSI Security:
OSI Security is an independent network and computer security auditing
and consulting company based in Sydney, Australia. We provide internal
and external penetration testing, vulnerability auditing and wireless
site audits, vendor product assessments, secure network design,
forensics and risk mitigation services.
We can be found at http://www.osisecurity.com.au/
[ reply ]
Copyright 2010, SecurityFocus