Auth-Proxy FTP Session Credential Bypass Fix & POC (IDOR/Session Fixing)

Vulnerability Overview Vulnerability Type: Privilege escalation due to shared credentials in the authentication proxy (IDOR / session fixation issue) Description: In , when two FTP sessions use the same username but different passwords, the later-logged-in session reuses the credentials of the earlier-logged-in session. This causes the later session's credentials to be overwritten by the session data of the earlier session, leading to inconsistent authentication state and potential privilege escalation. Impact Scope: The session credential management logic in the in ; affects FTP proxy scenarios using . Fix Proposal Introduce a mechanism in : - Add a field to store the obscured password for each session ( ). - Add in to protect concurrent access to . - Register options via in . - In , when is true, initialize the user password map using . - In , when is empty, initialize the user password map using . - In , when is not empty, initialize the user password map using . - In , when is empty, initialize the user password map using . - In , when is not empty, initialize the user password map using . - In , when is empty, initialize the user password map using . - In , when is not empty, initialize the user password map using . POC Code ```go // cmd/server/ftp_proxy_crossover_test.go package ftp import ( "context" "os" "path/filepath" "testing" "github.com/cloudfoundry/ftp" "github.com/cloudfoundry/ftp/server" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudfoundry/ftp/server/proxy" "github.com/cloudf

Goal Reached Thanks to every supporter — we hit 100%!

Auth-Proxy FTP Session Credential Bypass Fix & POC (IDOR/Session Fixing)

More from this source