Several security flaws were found in the implementation of the Open Authorization (OAuth) social login functionality used by the online travel agency Booking.com.
Vulnerabilities discovered by salt security Users logged into the site via Facebook accounts may be affected.
“OAuth misconfigurations could have enabled both a large-scale account takeover (ATO) on customer accounts and server compromise.” I have written Aviad Carmel, security researcher at Salt Security.
Security experts say OAuth offers a simpler user experience in interacting with websites, but its complex technical backend poses security problems and can be exploited.
“OAuth has quickly become an industry standard and is now used by hundreds of thousands of services around the world,” said Yaniv Balmas, vice president of research at the company. “As a result, OAuth misconfigurations can have a significant impact on both businesses and customers as they expose valuable data to the bad guys.”
Specifically, the researcher said he found the vulnerability by manipulating a specific step in the Booking.com site’s OAuth sequence.
“[We] We discovered that we could hijack sessions to perform account takeover (ATO), steal user data, and perform actions on the user’s behalf,” writes Balmas.
After discovering the flaws, Salt Labs disclosed them to Booking.com, and the company reportedly fixed them.
A spokesperson for the company said, “Upon receiving the report from Salt Security, our team immediately investigated the findings and confirmed that the Booking.com platform was not compromised and the vulnerability was quickly resolved. I have confirmed,” he said.
Salt Labs said it saw no evidence that it had been exploited in the wild. This discovery comes almost a year after GitHub confirmed several organizations were compromised by threat actors. Using stolen OAuth tokens Access your private repository.
Recently, Microsoft reported that attackers installed an OAuth application on a compromised cloud tenant, I used them to control my Exchange server Spread spam.
Image credit: II.studio / Shutterstock.com
