Permission Bypass in OpenHarness Allows Sensitive File Disclosure

Compliance Impact

This vulnerability allows attackers to bypass permission checks and read sensitive files, including key material and configuration files, despite configured path restrictions.

Such unauthorized disclosure of sensitive local file content could lead to violations of data protection regulations and standards like GDPR and HIPAA, which require strict controls over access to sensitive data.

Therefore, exploitation of this vulnerability may result in non-compliance with these regulations due to unauthorized data exposure.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in OpenHarness before commit bd4df81 and is a permission bypass issue. It occurs because the permission checker does not fully normalize file paths, allowing attackers to exploit this incomplete path normalization.

Attackers can use built-in tools like grep and glob to access sensitive root directories that should be restricted by path rules. Due to improper evaluation of these paths, attackers can read sensitive files such as local file content, key material, configuration files, or directory listings despite the intended restrictions.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive information. Attackers can read confidential files, including key material and configuration files, which may compromise system security.

Because the vulnerability allows remote attackers to bypass permissions without any privileges or user interaction, it poses a high risk of data exposure.

Useful 0 Not Useful 0