ePA3-Service-OpenSource Security Fixes: Cert Validation, Trust Store, Header Sanitization, Replay Protection

Vulnerability Overview The attached screenshot displays the release notes for the project “ePA3-Service-OpenSource,” which highlights several key security enhancements and fixes. Scope of Impact 1. Certificate Validation Logic: - The certificate validation logic has been completely rewritten and modularized. - A new class, , has been introduced. - Certificate validation logic has been decoupled from . - A unified validator is used across all relevant protocol steps. 2. Trust Store Management: - A comprehensive trust store concept has been introduced. - Certificates are downloaded from . - Processing of and files is implemented. - Root certificates and subordinate CA certificates are validated. - Certificates are packaged into a central CA trust store. - Certificates are loaded from the connector. - Included certificates are extracted and packaged. - HTTP requests now automatically utilize the matching trust store package. 3. Secure Handling of HTTP Headers: - Secure handling of HTTP headers has been improved. - The functions and have been introduced. - Unsafe characters (such as CRLF and NUL) have been removed. - The format of the insurance ID is validated. - Sanitized header values are used centrally throughout the VAU protocol. 4. Replay Protection Mechanism: - Management of request and response counters has been improved. - A new variable, , has been introduced. - Validation logic has been enhanced to reject all responses with incorrect counters. - The is incremented consistently. Remediation 1. Certificate Validation Logic: - Use the new class for certificate validation. - Decouple certificate validation logic from . - Use the validator uniformly across all relevant protocol steps. 2. Trust Store Management: - Download certificates from . - Process and files. - Validate root certificates and subordinate CA certificates. - Package certificates into the central CA trust store. - Load certificates from the connector. - Extract and package included certificates. - HTTP requests now automatically utilize the matching trust store package. 3. Secure Handling of HTTP Headers: - Handle HTTP headers using and . - Remove unsafe characters (such as CRLF and NUL). - Validate the format of the insurance ID. - Use sanitized header values centrally throughout the VAU protocol. 4. Replay Protection Mechanism: - Manage request and response counters using the new variable . - Improve validation logic to reject all responses with incorrect counters. - Increment consistently. POC Code or Exploit Code No specific POC code or exploit code is provided on the page. Summary The release notes detail multiple security enhancements and fixes, including the rewriting of certificate validation logic, the introduction of trust store management, secure handling of HTTP headers, and improvements to the replay protection mechanism. These improvements aim to enhance the system’s security and stability.

Goal Reached Thanks to every supporter — we hit 100%!

ePA3-Service-OpenSource Security Fixes: Cert Validation, Trust Store, Header Sanitization, Replay Protection

More from this source