Loading HuntDB...

[wave.informatica.com]- Subdomain missconfiguration

Medium
I
Informatica
Submitted None
Reported by mohammad-obaid

Vulnerability Details

Technical details and impact analysis

Violation of Secure Design Principles
One of your subdomain https://wave.informatica.com has a CNAME record that resolved to ghs.google.com and shows 404 error when navigating to subdomain. You should remove CNAME entry for that subdomain pointing towards ghs.google.com. Although I couldnt verify the domain ownership process to fully takeover subdomain but it still possess thread in a sense that anyone can claim gsuite account using https://wave.informatica.com subdomain.For sake of poc I claim gsuite account with your subdomain name as shown in picture3. I will remove it if you want. THREAD: This could potentially prevent informatica from using services such as Google Drive, GMail, and Google Calendar with that particular subdomain. POSSIBLE FIX: To fully resolve the issue you need to remove the CNAME record and put in place a web forwarding rule for wave.informatica.com towards new web landing page

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Violation of Secure Design Principles