Read Time:44 Second

Description

The referer field in HTTP requests can be easily modified and, as such, is not a valid means of message integrity checking.

The referer field in HTML requests can be simply modified by malicious users, rendering it useless as a means of checking the validity of the request in question.

Modes of Introduction:

– Architecture and Design

 

Likelihood of Exploit: High

 

Related Weaknesses

CWE-290

 

Consequences

Access Control: Gain Privileges or Assume Identity

Actions, which may not be authorized otherwise, can be carried out as if they were validated by the server referred to.

 

Potential Mitigations

Phase: Architecture and Design

Description: 

In order to usefully check if a given action is authorized, some means of strong authentication and method protection must be used. Use other means of authorization that cannot be simply spoofed. Possibilities include a username/password or certificate.

CVE References