filmov
tv
Swedbank Estonia Internet bank ID card authentication bypass
Показать описание
The flaw in Swedbank Estonia Internet bank allows to login just by knowing the victim's user ID.
Timeline:
2013.04.19. 15:55 - reported to CERT-EE
2013.04.19. 18:30 - fixed by Swedbank Estonia
The flaw is caused by allegedly misconfigured F5 BIG-IP LTM server's failure to verify signature of the X.509 certificate received in the ID card authentication process. The proof-of-concept video shows how victim's original certificate is retrieved from the public LDAP directory and certificate's public key is replaced with a public key from a freshly generated RSA keypair. The modified "fake" certificate is then imported in the browser and submited in the authentication process.
Timeline:
2013.04.19. 15:55 - reported to CERT-EE
2013.04.19. 18:30 - fixed by Swedbank Estonia
The flaw is caused by allegedly misconfigured F5 BIG-IP LTM server's failure to verify signature of the X.509 certificate received in the ID card authentication process. The proof-of-concept video shows how victim's original certificate is retrieved from the public LDAP directory and certificate's public key is replaced with a public key from a freshly generated RSA keypair. The modified "fake" certificate is then imported in the browser and submited in the authentication process.
0:03:01
Swedbank Estonia Internet bank ID card authentication bypass
0:04:14
SEB Estonia Internet bank ID card authentication bypass
0:01:48
Kaip užsiregistruoti į banką „Swedbank' internetu 💻, jei neturite savo veikiančio SMART ID?...
0:03:34
Bank ID - Beställa nytt BankID Steg för Steg. Swedbank via din mobil eller surfplatta
0:03:04
Estonian Internet bank authentication token cross-site replay
0:00:36
Kā ar Smart-ID veikt maksājumu internetbankā
0:00:43
Swedbank Kundtjänst: Telefonnummer och hemsida
0:00:21
Swedbank Smart-ID
0:02:31
Latvian Internet bank authentication token cross-site replay
0:01:21
Swedbank Appfilm
0:03:10
Så öppnar du ISK i Swedbank och Sparbankernas Internetbank - textat
0:05:27
Swedbank kodu energiatõhususe laen @Ehitame! TV (29.11.2020)
0:00:46
Smart-ID un internetbankas lietošana mobilajās ierīcēs
0:01:48
Mobile-ID identification at Swedbank's call centre
0:00:37
Как со Smart-ID совершать платежи в интернет-банке
0:01:12
How To Fix Swedbank App Not Working (2025)
0:01:21
Kā Swedbank internetbankā noslēgt līzinga līgumu?
0:00:45
Stora problem med internetbanken för Swedbanks kunder
0:01:33
How to Fix Swedbank Lietuva Not Working / Not Open / Loading Problem in Android
0:01:21
Kā sagatavot konta pārskatu no Swedbank internetbankas?
0:00:20
Swedbank SmartID CINEMA
0:01:52
Swedbank 2014 Clear Channel Estonia
0:08:40
Аналитик: скандал со Swedbank — это не причина бежать в банк и снимать деньги...
0:00:27
30 sec pitch: work at Swedbank
Комментарии