Category: General|Mar 18, 2020 | Author: Admin

Slack Patch Critical Vulnerability Allowing Automated Account Takeovers

Share on

A critical security vulnerability existed in Slack that could have lead to a massive data breach affecting its customers. Slack also fixed another vulnerability together with this one.

Slack Vulnerability Allowing Account Takeovers Reportedly, bug hunter Evan Custodio discovered a critical vulnerability affecting Slack. As per his findings, the vulnerability could allow automated account takeovers, ultimately leading to a data breach. While disclosing the flaw to Slack via its HackerOne bug bounty program, the researcher shared a detailed report about the exploit. As revealed, he found an HTTP Request Smuggling bug that could allow automated hacking of arbitrary customer accounts.

This researcher exploited an HTTP Request Smuggling bug on a Slack asset to perform a CL.TE-based hijack onto neighboring customer requests. This hijack forced the victim into an open-redirect that forwarded the victim onto the researcher’s collaborator client with slack domain cookies. The posted cookies in the customer request on the collaborator client contained the customer’s secret session cookie.

Thus, an adversary could exploit the flaw to continue taking over random accounts, something that can lead to a huge breach. A potential attacker could also create bots to execute the attacks, thus involving automation for swift breaches.

Following his report, Slack confirmed by reproducing the exploit and worked out a fix for the bug. Both the researcher and the vendors agreed to disclose the bug publicly after ensuring a patch was implemented. They have now disclosed the bug after fixing it, whilst acknowledging the researcher’s efforts with a $6500 bounty. Other Slack Vulnerabilities Also Fixed Alongside the above, Slack also disclosed another critical vulnerability that awarded the researcher an additional $3500 bounty.

As revealed through the report, the TURN server allowed proxying UDP packets and TCP connections to interact with the internal Slack network. The researcher Sandro Gauci, who reported this flaw, also won another bounty of $2000 for reporting a high-severity vulnerability. As revealed through the bug report, this flaw allowed a man-in-the-middle hijack and handle SRTP stream in place of Slack. While the researcher discovered and reported this vulnerability around a year ago, Slack disclosed the bug only recently after ensuring a thorough fix.

Let us know your thoughts in the comments.

Sponsored Ads:

Comments:


Microsoft has broken network printing AGAIN

Category: Microsoft|Oct 17, 2021 | Author: Admin

This is the first Alienware machine - now they are ready with a brand new model

Category: IT|Oct 16, 2021 | Author: Admin

Warzone and Vanguard install a driver to stop cheaters

Category: General|Oct 15, 2021 | Author: Admin

In the new iPhone update, you can finally disable this annoyance

Category: Apple|Oct 14, 2021 | Author: Admin

Enorm politiaksjon på Kongsberg: – Flere skadde og omkomne personer

Category: Lokale nyheter [Vestfold]|Oct 13, 2021 | Author: Admin

Google accuses Epic of breach of contract

Category: Google|Oct 13, 2021 | Author: Admin

Android vs. iOS in the enterprise: IT now has a real choice

Category: IT|Oct 12, 2021 | Author: Admin

Firefox sends everything you type into Mozilla's search box

Category: IT|Oct 11, 2021 | Author: Admin

Why is Apple appealing the verdict that they presented as "a resounding victory"?

Category: Apple|Oct 10, 2021 | Author: Admin

If you are waiting for AirPods Pro 2, you will have to wait a long time

Category: Apple|Oct 9, 2021 | Author: Admin

Build a PC for free (Epic Games)

Category: IT|Oct 8, 2021 | Author: Admin

Twitch source code and creator payouts part of massive leak

Category: General|Oct 7, 2021 | Author: Admin

Therefore, Facebook was away for six hours

Category: General|Oct 6, 2021 | Author: Admin

Zoom’s $14.7B acquisition bid for Five9 falls apart

Category: General|Oct 5, 2021 | Author: Admin

Problems with Many websites like Facebook and Instagram: - We are working hard

Category: General|Oct 4, 2021 | Author: Admin
more