漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2015-0148953
漏洞标题：某移动校讯通设计逻辑缺陷可重置用户密码
相关厂商：中国移动
漏洞作者： 路人甲
提交时间：2015-10-24 15:18
修复时间：2015-12-12 16:18
公开时间：2015-12-12 16:18
漏洞类型：设计缺陷/逻辑错误
危害等级：中
自评Rank：6
漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2015-10-24： 细节已通知厂商并且等待厂商处理中
2015-10-28： 厂商已经确认，细节仅向厂商公开
2015-11-07： 细节向核心白帽子及相关领域专家公开
2015-11-17： 细节向普通白帽子公开
2015-11-27： 细节向实习白帽子公开
2015-12-12： 细节向公众公开
简要描述：
可通过burp爆破改密码
详细说明：
通过教师的忘记密码 邮箱找回密码的方式抓包爆破老师名字 然后再通过短信验证修改密码 获取验证码 再抓包就行 泄露大量学生和家长的信息 不法分子可以通过发短信给家长欺骗钱财
漏洞证明：
![)L$W@%$PX@]O6S%{PKO(5@Q.png](https://w.hundan.org/articles/attach/201510/231755162e1cb4a028b2cd824dc7a2f1c68d9cc8.png)
![_KDEV%1GJHEOCR8UL]II3IH.png](https://w.hundan.org/articles/attach/201510/23175556380e41508d65d80672fc2e3cf81e90ca.png)
![DD])~JLHUX_5TI3~1{_)3SU.png](https://w.hundan.org/articles/attach/201510/231756398a6cb8792aef163271d054ceb3d260bd.png)
![N8W(][RMVUM9F0QMMP~9GFK.png](https://w.hundan.org/articles/attach/201510/231757411db207fe230027ea0354485f78542779.png)
![UPV43BN3G%W21$4]ILH6XXY.png](https://w.hundan.org/articles/attach/201510/23175751d8d24d874042f54e8b90bae508b0c3e7.png)
![W0XEE)FPA2YU}@R02P%ZG]U.png](https://w.hundan.org/articles/attach/201510/23175808228cfa288f6bdbcdc4878cf96be32233.png)
zhangwei
wangwei
wangfang
liwei
lina
zhangmin
lijing
wangjing
liuwei
wangxiuying
zhangli
lixiuying
wangli
zhangjing
zhangxiuying
liqiang
wangmin
limin
wanglei
liuyang
wangyan
wangyong
lijun
zhangyong
lijie
zhangjie
zhanglei
wangqiang
lijuan
wangjun
zhangyan
zhangtao
wangtao
liyan
wangchao
liming
liyong
wangjuan
liujie
liumin
lixia
lili
zhangjun
wangjie
zhangqiang
wangxiulan
wanggang
wangping
liufang
zhangyan
liuyan
liujun
liping
wanghui
wangyan
chenjing
liuyong
liling
liguiying
wangdan
ligang
lidan
liping
wangpeng
liutao
chenwei
zhanghua
liujing
litao
wangguiying
zhangxiulan
lihong
lichao
liuli
zhangguiying
wangyulan
liyan
zhangpeng
lixiulan
zhangchao
wangling
zhangling
lihua
wangfei
zhangyulan
wangguilan
wangying
liuqiang
chenxiuying
liying
lihui
limei
chenyong
wangxin
lifang
zhangguilan
libo
yangyong
wangxia
liguilan
wangbin
lipeng
zhangping
zhangli
zhanghui
zhangyu
liujuan
libin
wanghao
chenjie
wangkai
chenli
chenmin
wangxiuzhen
liyulan
liuxiuying
wangping
wangping
zhangbo
liuguiying
yangxiuying
zhangying
yangli
zhangjian
lijun4
lili
wangbo
zhanghong
liudan
lixin
wangli
yangjing
liuchao
zhangjuan
yangfan
liuyan
liuying
lixue
lixiuzhen
zhangxin
wangjian
liuyulan
liuhui
liubo
zhanghao
zhangming
chenyan
zhangxia
chenyan
yangjie
wangshuai
lihui
wangxue
yangjun
zhangxu
liugang
wanghua
yangmin
wangning
lining
wangjun
liuguilan
liubin
zhangping
wangting
chentao
wangyumei
wangna
zhangbin
chenlong
lilin
wangyuzhen
zhangfengying
wanghong
lifengying
yangyang
liting
zhangjun
wanglin
chenying
chenjun
liuxia
chenhao
zhangkai
wangjing
chenfang
zhangting
yangtao
yangbo
chenhong
liuhuan
wangyuying
chenjuan
chengang
wanghui
zhangying
zhanglin
zhangna
zhangyumei
wangfengying
zhangyuying
lihongmei
liujia
liulei
zhangqian
liupeng
wangxu
zhangxue
liyang
zhangxiuzhen
wangmei
wangjianhua
liyumei
wangying
liuping
yangmei
lifei
wangliang
lilei
lijianhua
wangyu
chenling
zhangjianhua
liuxin
wangqian
zhangshuai
lijian
chenlin
liyang
chenqiang
zhaojing
wangcheng
zhangyuzhen
chenchao
chenliang
liuna
wangqin
zhanglanying
zhanghui
liuchang
liqian
yangyan
zhangliang
zhangjian
liyun
zhangqin
wanglanying
liyuzhen
liuping
chenguiying
liuying
yangchao
zhangmei
chenping
wangjian
liuhong
zhaowei
zhangyun
zhangning
yanglin
zhangjie
gaofeng
wangjianguo
yangyang
chenhua
yanghua
wangjianjun
yangliu
liuyang
wangshuzhen
yangfang
lichunmei
liujun
wanghaiyan
liuling
chenchen
wanghuan
lidongmei
zhanglong
chenbo
chenlei
wangyun
wangfeng
wangxiurong
wangrui
liqin
liguizhen
chenpeng
wangying
liufei
wangxiuyun
chenming
wangguirong
lihao
wangzhiqiang
zhangdan
lifeng
zhanghongmei
liufengying
liyuying
wangxiumei
lijia
wanglijuan
chenhui
zhangtingting
zhangfang
wangtingting
wangyuhua
zhangjianguo
lilanying
wangguizhen
lixiumei
chenyulan
chenxia
liukai
zhangyuhua
liuyumei
liuhua
libing
zhanglei
wangdong
lijianjun
liuyuzhen
wanglin
lijianguo
liying
yangwei
liguirong
wanglong
liuting
chenxiulan
zhangjianjun
lixiurong
liuming
zhoumin
zhangxiumei
lixuemei
huangwei
zhanghaiyan
wangshulan
lizhiqiang
yanglei
lijing
litingting
zhangxiurong
liujianhua
wanglili
zhaomin
chenyun
lihaiyan
zhangguirong
zhangjing
liuli
likai
zhangyu
zhangfeng
liuxiulan
zhangzhiqiang
lilong
lixiuyun
lixiufang
lishuai
lixin
liuyun
zhanglili
lijie
zhangxiuyun
wangshuying
wangchunmei
wanghongmei
chenbin
liyuhua
liguifang
zhangying
chenfei
wangbo
liuhao
huangxiuying
liuyuying
lishuzhen
huangyong
zhouwei
wangxiufang
wanglihua
wangdandan
libin
wangguixiang
wangkun
liuhui
lixiang
zhangrui
zhangguizhen
wangshuhua
liushuai
zhangfei
zhangxiufang
wangyang
chenjie
zhangguifang
zhanglijuan
wangrong
wuxiuying
yangming
liguixiang
mali
liuqian
yangxiulan
yangling
wangxiuhua
yangping
wangbin
liliang
lirong
liguizhi
lilin
liyan
lijian
wangbing
wangguifang
wangming
chenmei
zhangchunmei
liyang
wangyan
wangdongmei
liufeng
lixiuhua
lidandan
yangxue
liuyuhua
maxiuying
zhanglihua
zhangshuzhen
lixiaohong
zhangbo
wangxin
wangguizhi
zhaoli
zhangxiuhua
zhanglin
huangmin
yangjuan
wangjinfeng
zhoujie
wanglei
chenjianhua
liumei
yangguiying
lishuying
chenyuying
yangxiuzhen
sunxiuying
zhaojun
zhaoyong
liubing
yangbin
liwen
chenlin
chenping
sunwei
zhangli
chenjun
zhangnan
liuguizhen
liuyu
liujianjun
zhangshuying
lihongxia
zhaoxiuying
libo
wangli
zhangrong
zhangfan
wangjianping
zhangguizhi
zhangyu
zhouyong
zhangkun
xuwei
wangguihua
liuqin
zhoujing
xumin
liutingting
xujing
yanghong
wanglu
zhangshulan
zhangwen
yangyan
chenguilan
zhouli
lishuhua
chenxin
machao
liujianguo
liguihua
wangfenglan
lishulan
chenxiuzhen
这些是教师名字字典
修复方案：
找回密码验证方式加深难度
版权声明：转载请注明来源 路人甲@乌云
漏洞回应
厂商回应：
危害等级：中
漏洞Rank：8
确认时间：2015-10-28 16:17
厂商回复：
CNVD确认所述情况,已经转由CNCERT向中国移动集团公司通报,由其后续协调网站管理部门处置。
最新状态：
暂无