HackDig : Dig high-quality web security articles for hacker

Vulnerabilities Found in German e-Government Communication Library

2017-06-30 16:25
Researchers find critical flaws in secure communications protocol used in areas including population registration, justice and public health systems.

Researchers have discovered critical vulnerabilities in the "OSCI-Transport" communication library, which plays an important role in the German e-government, reports SEC Consult.

The OSCI-transport protocol is the required communication protocol for public admins and foundation for e-government. It serves as a secure channel for government agencies to communicate across areas like population registration, justice system, and public health system. Attackers should not be able to view or interfere with messages.

Experts broke some of the security safeguards OSCI claims to have. They demonstrated how a hacker could use an external XML Entity Injection attack, which would let him or her read local files on communication partners' systems. Someone who accessed the communication channel could also decrypt parts of a message and, in some cases, potentially forge messages.

SEC Consult notes that a full security audit has not been performed, and there is a possibility further vulnerabilities exist.

Read more details here.


Source: c-tnemnrevog-e-namreg-ni-dnuof-seitilibarenluv/staerht---seitilibarenluv/moc.gnidaerkrad.www

Read:225 | Comments:0 | Tags:No Tag

“Vulnerabilities Found in German e-Government Communication Library”0 Comments

Submit A Comment

Name:

Email:

Blog :

Verification Code:

Announce

Share high-quality web security related articles with you:)

Tools

Tag Cloud