OpenID Impersonation Vulnerability in Zend Framework 1 - High Risk
Summary
GHSA-9v78-h226-2rmq: Zendframework potential security issue in login mechanism. Affects zendframework/zendframework1 versions >= 1.12.0, < 1.12.4. Fixed in 1.12.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Zend Framework 1 is an open-source, object-oriented web application framework implemented in PHP 5. It provides a robust set of components for building web applications and services. The framework includes a Consumer component for OpenID authentication, which allows users to log in using their OpenID accounts. However, this component has a significant security vulnerability that can be exploited by malicious actors.
Vulnerability Detail
The vulnerability arises from the Consumer component of Zend OpenID, which allows users to log in using arbitrary OpenID accounts without requiring any secret information. This is possible due to the acceptance of OpenID tokens with arbitrarily signed elements. The framework fails to verify that all necessary parameters are signed, enabling an attacker to impersonate any OpenID identity. This could lead to unauthorized access to user accounts and sensitive information, posing a serious security risk.
How To Fix
Minimum fixed version
1.12.4
This is the first release that contains the fix.
composer require zendframework/zendframework1:1.12.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling OpenID authentication in your application until you can update to the patched version. This will prevent any potential exploitation of the vulnerability while you work on applying the fix.
Conclusion
The OpenID impersonation vulnerability in Zend Framework 1 poses a significant risk to applications using this framework. It is crucial to update to the latest patched version to protect against potential exploitation. Additionally, utilizing tools like Vulert can help monitor and manage vulnerabilities in your open-source dependencies effectively.
See every vulnerability recorded for zendframework/zendframework1 →
FAQ
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability could allow attackers to impersonate users, gaining unauthorized access to accounts and sensitive data.
Yes, Vulert can monitor your open-source dependencies in real-time for vulnerabilities using just the composer.lock file.
If you cannot update the package right away, disable OpenID authentication as a temporary measure to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for zendframework/zendframework1.
