Summary
Convincing a victim to click a specially crafted link would allow the attacker
to bypass the Identity-Aware Proxy (a core component of BeyondCorp).
Affected Services
N/A
Remediation
None required
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/0xdabbad00
Entry Status
Finalized
Disclosure Date
Fri, Sep 17th, 2021
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Unknown
