Stored XSS in SNS Enrollment Portal

Executive Summary

This is a Stored Cross-Site Scripting (XSS) vulnerability in the Stormshield Network Security (SNS) Enrollment Portal. An attacker can inject malicious scripts when requesting user creation through the captive portal. The injected script is stored and only triggered when an administrator validates the user.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor HTTP traffic for suspicious user creation requests in the SNS Enrollment Portal. Check for unusual script injections in the 'user creation' fields. Review logs for administrator validation triggers that may execute stored scripts.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows an attacker to execute malicious scripts in the context of an administrator's session. This could lead to unauthorized access, data theft, or further compromise of the system. The attack requires adjacent network access and user interaction.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially violate compliance with GDPR and HIPAA due to its impact on confidentiality and integrity. A stored XSS attack may allow unauthorized access to sensitive user data, which is a violation of GDPR's data protection principles and HIPAA's security requirements for protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update to the patched versions: SNS 5.1.4 EA, SNS 5.0.10, SNS 4.8.20 LTSB, or SNS 4.3.45 QS. If updating is not possible, restrict access to the captive portal and monitor administrator validation sessions closely.

Useful 0 Not Useful 0