VAPT errors and how to fix them?

1

i am in 7-8 month older version of cockpit, but ondoing Vulnerability Assessment and Penetration Testing by my client, they found

  1. PII Disclosure

  2. stored xss and xss through file upload ,

  3. CSRF Token Reuse,

  4. Authentication Bypass via Response Manipulation

  5. Session Hijacking,

    are any of these these resolved in latest version? if not guide to fix them

Note it was a plain installation , with little to no customization.

2

which version are you on?

3

It would also make sense the share the findings privately or do an assessment in general against a newer version

4

okay i am sending you the reports today

5

did you find solution?

6

based on his we did a test on our internal framework built on top of urs

Token Reuse is indeed valid:

1
13584×1984 349 KB

2
23584×1984 352 KB

7

i was able to replicate session hijacking too using cookie editor:
steps:
login to cockpit-> export session cookie using cookie editor extension → import cookie in a different device using the same extension-> login boom :worried:

image
image1626×1398 194 KB

image
image441×311 24.8 KB

8

This is a php.ini configuration issue. Make sure to have the following configured:

```
session.cookie_httponly = 1
session.cookie_secure = 1
session.cookie_samesite = “Strict”
session.use_only_cookies = 1
session.use_strict_mode = 1

```