xBORDER ∞ API E-Commerce Block-Chain

NAME: XBO-GOBA1

P. Oldenburger @ xBORDER

​

API-OATH HACK, ZERO DAY VULNERABILITY FOUND IN GOOGLE

​

April 4, 2020, Amsterdam Netherlands

​

​

​

​

BUG NAME=

XBO-GOBA1 -  Google API OATH Authorization Bug, found on 4 April 2020.

 

​

6 April 2020,  Amsterdam Netherlands.

​

 

xBORDER NERD BO-X.iO BUG Analysts, # xBORDER Research team found a mayor authorization Bug in the Google Admin Application Softwaremrun on 13.4 OSX, Reset Password DIsabled Full Administrator Access to all underlying Nodes, Domains, and Admins.

 

This Bug can have a serious impact -- it can have major complications when Administrator Access / Super Admins are disabled to DomainReg, "DNS, MX, NAMES, A, AA"  Access. This can be resolved by rewriting the OATH access API in that Application.     See pictures for details. 

​

​

This is a config Error that can be used as a gate to full access of ALL google applications.

​

Restore of Original Values are virtually impossible due to WHOIS restrictions on google.domains, CNAME updates are virtually impossible due to non-access. this is a RE-LOOP Bu and could have a major impact.

​

​

P.Oldenburger

# NERD BO-X.iO @ xBORDER

 ! AN ODE {  xBORDER  }  - VOC-X "VALUE:  +10 } , VOC-X Crawlers deployed on this Oath bug can leech massive amounts of user data, company data.

 

FIRST REPORT 2 GOOGLE @4ARIL2020Google Cases ref: 2-6991000030256 Senior Google Specialists.