Authorization Bypass in WeGIA Password Change Mechanism

Executive Summary

This is an authorization bypass vulnerability in WeGIA versions before 3.9.2. It allows any authenticated user to change their account password without providing their current credentials. The flaw exists because the alterarSenha method is excluded from permission checks, letting attackers manipulate the redir parameter to bypass password verification and take over accounts permanently.

Useful 0 Not Useful 0

Detection Guidance

Check WeGIA versions before 3.9.2 for the presence of the alterarSenha method exclusion in controle/control.php and verify if the redir parameter can be manipulated to bypass password verification. Inspect logs for unauthorized password change attempts or unusual redir parameter values pointing to alterar_senha.php.

Useful 0 Not Useful 0

Impact Analysis

An attacker with temporary access (e.g., via stolen session cookies or shared computers) could change your password without knowing the old one, locking you out of your account permanently. Even low-privilege users can exploit this to gain full control over their accounts.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control. GDPR mandates strong authentication and protection against unauthorized access, while HIPAA requires safeguards for sensitive health data. The lack of proper authorization checks undermines these standards.

Useful 0 Not Useful 0

Mitigation Strategies

Update WeGIA to version 3.9.2 or later. Remove alterarSenha from the $sem_permissao exception list in controle/control.php. Ensure password changes require old password verification by using verificarSenha() instead of verificarSenhaConfig(). Implement re-authentication before credential changes.

Useful 0 Not Useful 0