OpenCA.ca.Access

Description

It indicates a request to /cgi-bin/ca/ca of OpenCA which may be vulnerable to HTTP injection attack.

Due to insufficient front-end input validation using a web form, an attacker can inject malicious HTML code into the OpenCA PKI system. Upon successful injection, the code persists in the system. It can be used to modify user data on the OpenCA system and to launch cross-site scripting attacks on other client nodes.

Affected Products

Any unpatched OpenCA OpenCA 0.9.2 RC6 and all prior releases is vulnerable to the attack.

Impact

Attackers can modify user data on the victim OpenCA system and launch further attacks on other client nodes.

Recommended Actions

Apply appropriate patches or upgrade OpenCA software to the latest non-vulnerable version.

References