Vulnerabilities found in city management software

guest · Apr 3, 2020

Vulnerabilities found in city management software
April 3, 2020
https://www.cyberscoop.com/cipplaner-zero-day-penetration-test-city-capital-improvment-program/

A big municipal government in the U.S. had just handed him the source code for software the city uses to manage contracts and track infrastructure projects.

He unpacked the code, sifted through it, and found more than a dozen previously undisclosed vulnerabilities, or zero-days, that a hacker could exploit to manipulate data or dump user passwords.
The product, known as CIPAce, has been used by public and private sector organizations to collect invoices and manage contracts and budgets, according to CIPPlanner Corp., the company that makes it.

“If one attacker happens to exploit this city, then they can look and see, easily, every other city that’s using this … and attack them using the same methods,” said Rhoads-Herrera, a penetration tester at CriticalStart, a Texas-based cybersecurity company.
Click to expand...

Getting the vulnerabilities fixed
After months of working with his client to mitigate the vulnerabilities, Rhoads-Herrera said he’s raising awareness about them through a report released Thursday. The report does not name the cities affected. CyberScoop has shared the findings with the MS-ISAC, the threat-sharing body for states and municipalities, which is investigating.

“Every single vulnerability we found in this application was unauthenticated,” said Rhoads-Herrera, who was skeptical of CIPPlanner’s claim that it does independent penetration tests. “And leaking passwords is definitely a critical issue, especially since I used it to VPN into their environment with ease.”
Click to expand...

Vulnerabilities Discovered in CIPAce Enterprise Platform

While conducting an external penetration test, our team noticed something very strange: a web application called CIPAce was disclosing errors. Under normal circumstances, this wouldn’t be unusual, but the way the application was handling errors coupled with the fact that full-stack traces were shown meant that the web.config file was configured incorrectly.
Click to expand...

Log in or Sign up

Vulnerabilities found in city management software

guest Guest

Log in or Sign up

Vulnerabilities found in city management software

guest Guest

Useful Searches