############################################################# # # COMPASS SECURITY ADVISORY # https://www.compass-security.com/research/advisories/ # ############################################################# # # Product: OfficeSpace [1] # Vendor: OfficeSpace Software Inc. # CSNC ID: CSNC-2018-020 # Subject: Credentials in Source Code # Risk: Medium # Effect: Remotely exploitable # Author: Stephan Sekula # Date: 18.04.2018 # ############################################################# Introduction: ------------- The smarter, easier way to manage your space. [1] Compass Security discovered a security flaw in OfficeSpace, which allows authenticated users to elevate their privileges. Affected: --------- Vulnerable: * Version 3.71.3 Technical Description --------------------- Users, with role Report Consumer can access /reports/index.jsp, which contains the application's API token: OfficeSpace Software -- Reports [CUT BY COMPASS] [CUT BY COMPASS] Workaround / Fix: ----------------- This issue can be fixed by not storing the API token in the application's source code, at least not on pages which are accessible to users who should not have access to the API token. Timeline: --------- 2018-07-31: Public disclosure date 2018-05-02: Initial vendor response 2018-04-23: Initial vendor notification 2018-04-18: Discovery by Stephan Sekula References: ----------- [1] https://www.officespacesoftware.com