Authentication Bypass in Digital-Infrastructure v9.6.7 SSO

Executive Summary

This vulnerability is in the Single Sign-On (SSO) component of Digital-Infrastructure v9.6.7. It allows attackers to authenticate as any user, including administrators, without a password by exploiting the QR code login mechanism. The system fails to verify passwords for QR code logins while requiring them for other methods.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor SSO login attempts with the loginType set to 'qrCode' and check for authentication requests using only a personId without a password. Inspect logs for unusual admin logins or forged RSA-encrypted credentials. No specific commands are provided in the context.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain full access to user accounts, steal sensitive data, perform unauthorized actions, or take control of the system. Since admin accounts are vulnerable, the entire infrastructure could be compromised, leading to data breaches or system takeover.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control, such as GDPR's principle of least privilege and HIPAA's access controls. Unauthorized access could lead to data breaches, resulting in legal penalties and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade Digital-Infrastructure to a version beyond 9.6.7. Disable QR code login functionality if possible. Implement strict input validation for personId and RSA key usage. Monitor for unauthorized admin logins or suspicious authentication patterns.

Useful 0 Not Useful 0