CSRF vulnerability in GMail service
CSRF vulnerability in the "Change password" function of the Gmail service.
Antecedentes
Gmail is Google's free web-based email service, with built-in search technology and ample storage capacity for keeping messages, files, and images.
Description
Cross-Site Request Forgery (CSRF, also known as a one-click attack or session riding) transmits unauthorized commands from a user in whom the site trusts. Gmail is vulnerable to CSRF in the "Change password" feature: the only element that authenticates the user is the session cookie, which the browser automatically sends with every request. An attacker can create a page with requests to that feature and change the victim's password.
Business impact
Selective denial of service to Gmail users (changing their password) and possible access to other users' email.
Affected systems
Gmail service.
Solución
The manufacturer has not provided any solution.
Calendario de divulgación
References
The information contained within this advisory is supplied 'as-is' with no warranties or guarantees of fitness for use or otherwise. Internet Security Auditors accepts no responsibility for any damage caused by the use or misuse of this information.
Company based in Spain and Colombia, specializing in web application auditing, network security, penetration testing, and compliance implementation and assessment. Our clients include some of the largest finance, telecommunications, insurance, and ICT companies. A vendor-independent provider with in-depth experience since 2001. Our R&D efforts include vulnerability research, collaboration on open security projects, whitepapers, and participation in industry events.
Would you like us to review your product?
Contact usDo you need a security audit?
Tell us about your situation and our team will get in touch with you to provide guidance or schedule a technical call.
Request information
Our offices
Transversal 22 # 98-82, Porta 100 Building, Office 1003
110221 Bogotá (Colombia)