HexBrain

Informatica · Report #205034

[wave.informatica.com]- Subdomain missconfiguration

Validstatus
mediumseverity
3upvotes
19 Feb 2017disclosed

How it was found

One of your subdomain https://wave.informatica.com has a CNAME record that resolved to ghs.google.com and shows 404 error when navigating to subdomain. You should remove CNAME entry for that subdomain pointing towards ghs.google.com. Although I couldnt verify the domain ownership process to fully takeover subdomain but it still possess thread in a sense that anyone can claim gsuite account using https://wave.informatica.com subdomain.For sake of poc I claim gsuite account with your subdomain name as shown in picture3. I will remove it if you want. THREAD: This could potentially prevent informatica from using services such as Google Drive, GMail, and Google Calendar with that particular subdomain. POSSIBLE FIX: To fully resolve the issue you need to remove the CNAME record and put in place a web forwarding rule for wave.informatica.com towards new web landing page

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original