XBO-GOBA1 BUG in GOOGLE OATH API April 4, 2020, Amsterdam Netherlands.

​

BUG NAME=

XBO-GOBA1 -  Google API OATH Authorization Bug, found on 4 April 2020.

6 April 2020,  Amsterdam Netherlands.

xBORDER NERD BO-X.iO BUG Analysts, # xBORDER Research team found a mayor authorization Bug in the Google Admin Application Softwaremrun on 13.4 OSX, Reset Password DIsabled Full Administrator Access to all underlying Nodes, Domains, and Admins.

This Bug can have a serious impact -- it can have major complications when Administrator Access / Super Admins are disabled to DomainReg, "DNS, MX, NAMES, A, AA"  Access. This can be resolved by rewriting the OATH access API in that Application.     See pictures for details. 

​

This is a config Error that can be used as a gate to full access of ALL google applications.

​

Restore of Original Values are virtually impossible due to WHOIS restrictions on google.domains, CNAME updates are virtually impossible due to non-access. this is a RE-LOOP Bu and could have a major impact.

​

Peter Oldenburger & Friends.

# NERD BO-X.iO @ xBORDER

​

 ! ANODE {  xBORDER  }  - VOC-X "VALUE:  +10 } , VOC-X Crawlers deployed on this Oath bug can leech massive amounts of user data, company data. Google Cases ref: 2-6991000030256 Senior Google Specialists.

 PROJECT8

 PROJECT8

 PROJECT8

 PROJECT8

 PROJECT8

 PROJECT8

BUG II:

Google API OATH Authorization PART II, GOOGLE DOMAINS BUG.

Mayor Bug found on 4 April 2020.

6 April 2020,  Amsterdam Netherlands.

Our Research team found a mayor Access & Authorization Bug @ Google, 

Gmail & Domain.google syn are non-compatible. G-mail, Gsuit re-access need CNAME implements, however Google.Domains is not acc. by login, This has mayor impact on Googlists that use the Gsuit & Google domain service. Access is imposible to recover. 

​

This Bug can have a serious impact because it can have major complications when Administrator Access / Super Admins are disabled to DomainReg, "DNS, MX, NAMES, A, AA"  Access. This can be resolved by rewriting the OATH access API in that Application oorn Seperating access control in Gsuite/Gmail and Domains.     See pictures for details. 

​

P.Oldenburger 2020

Amsterdam Netherlands.

​

​

 ! ANODE {  xBORDER  }  - VOC-X "VALUE:  +7 } , VOC-X Crawlers deployed on this Oath bug can Open Backdoor into Domain access.

​

Resolved: Google did call me and sent me the link /Domains/Help OMG :P

BO-x.iO