The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.
Weakness
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mobile_application_platform | Redhat | * | 4.4.3 (including) |
| Red Hat Mobile Application Platform 4.5 | RedHat | fh-system-dump-tool-0:1.0.0-5.el7 | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | fping-0:3.10-4.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | nagios-0:4.0.8-8.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | nagios-plugins-0:2.0.3-3.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | perl-Crypt-CBC-0:2.33-2.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | perl-Crypt-DES-0:2.05-20.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | perl-Net-SNMP-0:6.0.1-7.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | phantomjs-0:1.9.7-3.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | python-meld3-0:0.6.10-1.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | qstat-0:2.11-13.20080912svn311.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | radiusclient-ng-0:0.5.6-9.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | redis-0:2.8.21-2.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | rhmap-fh-openshift-templates-0:4.5.0-11.el7 | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | rhmap-mod_authnz_external-0:3.3.1-7.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | sendEmail-0:1.56-2.el7 | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | ssmtp-0:2.64-14.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | supervisor-0:3.1.3-3.el7map | * |
| Red Hat Mobile Application Platform 4.5 | RedHat | rhmap45/fh-aaa:1.0.5-12 | * |