[SHIRO-721] RememberMe Padding Oracle Vulnerability

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Resolved
• Affects Version/s: 1.2.5, 1.2.6, 1.3.0, 1.3.1, 1.3.2, 1.4.0-RC2, 1.4.0, 1.4.1
• Fix Version/s: 1.4.2
• Component/s: RememberMe
• Labels: java-deserialization padding-oracle-attack security
• Flags: Important
• Assignee: Unassigned
• Reporter: loopx9
• Created: 08/Sep/19 04:17
• Updated: 20/Nov/19 09:52
• Resolved: 18/Nov/19 20:34

Description

The cookie rememberMe is encrypted by AES-128-CBC mode, and this can be vulnerable to padding oracle attacks. Attackers can use a vaild rememberMe cookie as the prefix for the Padding Oracle Attack,then make a crafted rememberMe to perform the java deserilization attack like SHIRO-550.

Steps to reproduce this issue:

1. Login in the website and get the rememberMe from the cookie.
2. Use the rememberMe cookie as the prefix for Padding Oracle Attack.
3. Encrypt a ysoserial's serialization payload to make a crafted rememberMe via Padding Oracle Attack.
4. Request the website with the new rememberMe cookie, to perform the deserialization attack.

The attacker doesn't need to know the cipher key of the rememberMe encryption.