Vulnerability Disclosure (Web Apps)-Bravo Tejari Web- Portal-Unrestricted File Upload

From: Arvind Vishwakarma <arvind12786@gmail.com>
To: bugtraq@securityfocus.com
Cc:
Subject: Vulnerability Disclosure (Web Apps)-Bravo Tejari Web- Portal-Unrestricted File Upload
Date:


------------------------------------------------------------------
Vulnerability Type: Unrestricted File Upload
Vendor of Product: Tejari
Affected Product Code Base: Bravo Solution
Affected Component: Web Interface Management.
Attack Type: Local - Authenticated
Impact: Malicous File Upload
-----------------------------------------------------------------

Product description:
Brao Tejari is a strategic procurement platform that enables
organizations to generate more value, influence innovation and reduce
risk powered by a unique supplier-centered approach that integrates
supplier lifetime value throughout the entire procurement process

Attack Scenario:
The Web Interface of the Bravo Tejari procurement portal does not use
perform server-side check on uploaded files. An attacker who has
access to the application can bypass client-side checks and uploads
malicious executable, pdf's and web-shells on the web-server.

Affected Product Link:
https://xxxxxx.xxxx.com/esop/evm/OPPreliminaryForms.do?formId=857

Impact:
The uploaded files are not properly validated by the application. An
attacker can take advantage of this vulnerability and upload malicious
executable files to compromise the application.

Recommendation:
All uploaded files must be validated on both the client and server
side before storing them on the server.


Credit: Arvind Vishwakarma
http://ultimateone1.blogspot.ae/

Vulnerability Timeline:

12th December 2017 \u2013 Vulnerability Discovered
23rd December 2017 \u2013 Contacted Vendor \u2013 No Response
7th January 2018 \u2013 Contacted Vendor again \u2013 No Response
15th February 2018 \u2013 Vulnerability Disclosed





Copyright © 1995-2018 LinuxRocket.net. All rights reserved.