proCertum SmartSign CPS URI Schema Validation Bypass

Executive Summary

This vulnerability in proCertum SmartSign allows an attacker to craft a malicious certificate with a Certificate Practice Statement (CPS) URI pointing to a local executable file or any URL. When a victim opens a document signed with this certificate in the application, the specified file executes or the URL opens. The issue occurs because the application does not validate the URI schema properly.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of proCertum SmartSign. If it is below 9.4.3.90, the system is vulnerable. Review documents opened in the application for CPS URIs pointing to local executables or suspicious URLs.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to run arbitrary code on your system or open malicious websites when you open a signed document. This could lead to data theft, malware installation, or unauthorized access to your system. Users of proCertum SmartSign versions below 9.4.3.90 are affected.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially violate compliance with standards like GDPR and HIPAA by enabling unauthorized execution of local files or opening arbitrary URLs through manipulated documents. If exploited, it may lead to unauthorized data access, modification, or disclosure, which are key concerns under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update proCertum SmartSign to version 9.4.3.90 or later. Avoid opening documents from untrusted sources until the update is applied.

Useful 0 Not Useful 0