vendor:
totemomail Encryption Gateway
by:
Nicolas Heiniger
8.8
CVSS
HIGH
Cross-Site Request Forgery
352
CWE
Product Name: totemomail Encryption Gateway
Affected Version From: 6.0.0_Build_371
Affected Version To: 6.0.0_Build_371
Patch Exists: YES
Related CWE: CVE-2018-6563
CPE: a:totemo:totemomail_encryption_gateway
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: None
2018
Cross-Site Request Forgery in totemomail Encryption Gateway
The totemomail Encryption Gateway protects email communication with any external partner by encryption. Compass Security discovered a vulnerability in the webmail part of the solution. It is possible to predict all parameters that are required to execute actions on the webmail interface. This allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks. The attacker needs to craft a malicious web page that will automatically send a request to the Encryption Gateway. If the user is logged in, the request will be executed by the Encryption Gateway on behalf of the logged in user. This could be used to change a user's settings, send emails or change contact informations.
Mitigation:
The webmail should use anti-CSRF tokens to prevent CSRF attacks.