[asterisk-bugs] [JIRA] (ASTERISK-27185) s3 bucket writable - asteriskconfig

[Joshua Colp (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-27185?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joshua Colp closed ASTERISK-27185.
----------------------------------

    Resolution: Not A Bug

Asterisk, the project, doesn't control or use this S3 bucket. We also don't have S3 support in Asterisk itself that would have default settings. This appears to be from a user of Asterisk and not something we can control or rectify.

> s3 bucket writable - asteriskconfig
> -----------------------------------
>
>                 Key: ASTERISK-27185
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27185
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>            Reporter: vijiln
>            Severity: Critical
>
> Team,
> Found a writable amazon s3 bucket "asteriskconfig" in which anyone can upload,rename,delete files.Also all the config files where found on the s3 public which makes this severe.
> POC :
> when i opened the following s3 bucket
> http://s3.amazonaws.com/asteriskconfig/
> got the contents of the bucket listed,whilst a secure bucket would have brought up an access denied page.
> further i tried to upload copy rename and delete "test.txt"  using aws cli ,all succeeded !!
> 1.Copy local file to s3
> $ aws s3 cp test.txt s3://asteriskconfig
> Result: upload: ./test.txt to s3://asteriskconfig/test.txt 
> 2.Renaming file
> $ aws s3 mv s3://asteriskconfig/test.txt s3://asteriskconfig/test2.txt  
> Result:move: s3://asteriskconfig/test.txt to s3://asteriskconfig/test2.txt
> 3.Deleting file
> $ aws s3 rm s3://asteriskconfig/test2.txt
> delete: s3://asteriskconfig/test2.txt
> Impact :
> Risk is that anyone can upload malicious files,delete the existing files,rename and move files which makes this a critical vulnerability.
> Hope you guys will fix this soon.
> Screen shot is added here.
> Thank you !!



--
This message was sent by Atlassian JIRA
(v6.2#6252)