CVEs - Vulnerable HTTP Report

Description

The Hypertext Transfer Protocol (HTTP)

The Hypertext Transfer Protocol (HTTP) is a stateless protocol for fetching resources such as HyperText Markup Language (HTML) documents.  It is the foundation of any data exchange on the World Wide Web.  HTTP is a client-server protocol, which means requests are initiated by the recipient, usually the web browser.  Clients and servers communicate by exchanging individual messages (as opposed to a stream of data).   The messages sent by the client, usually a web browser, are called requests and the messages sent by the server as an answer are called responses.

HTTP is an application layer protocol that allows software to send and receive information and present data to users.  Because a connection is controlled at the transport layer, it is out of the scope of HTTP., which requires a transport layer protocol that is connection based and reliable, hence HTTP relies on the Transmission Control Protocol (TCP) to establish a connection between the client and the server, over which HTTP., send and receive data.

The original version of HTTP released in 1996–97 was called HTTP/1.1.  HTTP/2 and HTTP/3 are upgraded versions of the protocol itself.  The data transfer system has been modified to make it more efficient.  HTTP/2 exchanges data in binary instead of textual format.  It also allows servers to proactively transmit responses to client caches instead of waiting for a new HTTP request.  HTTP/3 builds on HTTP/2 supporting real-time streaming and other modern data transfer requirements more efficiently.

HTTP transmits data in plaintext unencrypted, which means that information sent from the client browser to the server can be intercepted and read by third parties.

HTTP listens on port 80/TCP and port 80/UDP.

The Hypertext Transfer Protocol Secure (HTTPS)

The Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP).  It uses encryption for secure communication over a computer network, and is widely used on the Internet.  In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS) or, formerly, Secure Sockets Layer (SSL).  The protocol is therefore also referred to as HTTP over TLS, or HTTP over SSL.

The Transport Layer Security (TLS) is a security protocol that is used to encrypt information as it is being sent over the Internet.  TLS is an improved version of the security protocol, and has replaced SSL, which has been deprecated.   TLS uses more robust encryption algorithms and provides better security than SSL., although the two terms are often used interchangeably.

To enable HTTPS on a website, it must have a valid TLS certificate.  This certificate is used to encrypt information as it is being sent between the client and the server.  An TLS certificate contains a public key and a private key.   The public key encrypts information, while the private key decrypts it.

TLS Certificates are issued by Certificate Authorities (CAs).  A CA is an organization that verifies the identity of a website and then gives a certificate to that site.  When a client browser connects to a website, the client browser checks to see if the website’s TLS Certificate is valid.  This is indicated by a green padlock in the address bar.  If it is not, a warning message "Not Secure" will be displayed in the address bar.

HTTPS Client Authentication is a more secure method of authentication.   The server authenticates the client using the client's Public Key Certificate (PKC).   The public key certificate can be likened to the digital equivalent of a passport.  It has being issued by a trusted organisation, the CA., and provides identification for the bearer.

HTTPS with its TLS technology provides data encryption, server authentication, message integrity and optional client authentication for a TCP/IP connection.

Companies that operate eCommerce websites use HTTPS, to ensure that their customers data, such as login IDs, home addresses, credit card details, and other personal information is encrypted when transmitted, protecting themselves and their customers from the threat of identity fraud.

In 2014, the Google Limited Liability Company, in recognition of the importance of security, publicly called for an internet-wide use of HTTPS., and began using HTTPS as a ranking signal in its Search Engine Optimisation (SEO) algorithms.   SEO is the process used to optimise a website's technical configuration, content relevance and link popularity so its pages can become easily findable, more relevant and popular towards user search queries, and as a consequence, ranking them better.

HTTPS listens on port 443/TCP and port 443/UDP.

Problem

On the 29th Sept 2023, the Shadowserver Foundation updated their Vulnerable HTTP Report in respect of the jurisdiction.  The report, reference twenty nine (29) Common Vulnerabilities and Exposures (CVEs), that have been publicly disclosed, which affect software products, deployed by specific hosts identified in the report, together with other vulnerabilities, such as the implementation of Basic Authentication in plain HTTP and .git folders that are publicly internet accessible.  Contained in the 'Tag' column of the report, are a list of terms, which indicate the particular vulnerability associated with each specific host, identified in the report.

Identified in the report are:-