Erlang OTP mod_auth 认证路径混淆漏洞及修复

漏洞概述 漏洞类型：HTTP 认证路径混淆（Authentication Path Confusion） 根本原因： 模块在生成认证路径时，未将 和 参数注入到 中。这导致当用户被添加到某个受保护的 时，该用户能够错误地通过其他受保护目录进行认证。 影响范围： 受影响的模块： 受影响的测试文件： 影响版本：OTP-26.5.0.6（根据截图中的分支标签） 修复方案 核心修复：修改 模块，确保在调用后端认证逻辑前，将 和 注入到 中，从而隔离不同目录的认证上下文。 测试增强：在 中增加了 测试用例，用于验证跨目录认证隔离是否生效。 POC / 测试代码 截图中包含用于验证该漏洞修复的测试代码（位于 ）： ```erlang auth_directory_isolation(Config) when is_list(Config) -> [{doc, "Verify that per-directory auth namespaces are isolated (OK-1082). " "A user added to /dirA must NOT be able to authenticate against /dirB."}, {version, "Verify that per-directory auth namespaces are isolated (OK-1082). " "A user added to /dirA must NOT be able to authenticate against /dirB."}, {auth_api_meta, [{auth_api_1, auth_api_1.0}, {auth_api_meta, [{auth_api_1, auth_api_1.0}]}, {auth_api_mnesia, [{auth_api_1, auth_api_1.0}]}, {auth_api_mnesia, [{auth_api_1, auth_api_1.0}]}, {security, [{security_1, security_1.0}]}, {logging, [{disk_log_internal, disk_log_stats, disk_log_max_size, disk_log_bad_file}]}, {skip, "Host does not support IPv6"} ]; %% Setup {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http_version, Config), {ok, _} = proplists:get_value(http

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Erlang OTP mod_auth 认证路径混淆漏洞及修复

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Erlang OTP mod_auth 认证路径混淆漏洞及修复

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！