Capgo Missing Filter in Channel Version Joins Allows Deleted Bundle Deployment

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in Capgo versions before 12.128.12. The issue is that the software fails to filter out deleted app versions when joining channels during the /updates resolution process. Because of this, deleted bundles remain selectable, allowing attackers to deploy these deleted bundles to devices by exploiting the missing filter on deleted app versions.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can impact you by allowing attackers to deploy deleted app bundles to your devices. This could lead to unauthorized or unintended software being installed, potentially causing security risks or operational issues.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves deleted app versions remaining selectable during /updates endpoint resolution due to missing filtering. Detection would involve monitoring requests to the /updates endpoint and inspecting if deleted bundles (marked with app_versions.deleted = true) are still being returned or deployed.

Commands or methods to detect this could include querying the /updates endpoint and analyzing the response for bundles that should have been deleted but are still present.

For example, using curl or similar HTTP clients to request updates and then filtering the response for deleted bundles might help identify the issue.

• curl -X GET https://<capgo-server>/updates -H 'Authorization: Bearer <token>'
• Inspect the JSON response for any app_versions where the deleted flag is true but the bundle is still included.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation involves upgrading Capgo to version 12.128.12 or later, where the filtering of deleted app versions during channel joins in the /updates endpoint is properly implemented.

Until an upgrade is possible, consider manually verifying and removing references to deleted bundles from channels to prevent devices from receiving deleted versions.

Additionally, monitor update deployments closely to detect any unintended delivery of deleted bundles and restrict access to the /updates endpoint if feasible.

Useful 0 Not Useful 0