2009 HP report says ACL checks fail for multi-principal access
Original title: ACLs don’t (2009)
HP Labs argued missing cross-message state lets clickjacking and CSRF bypass ACL decisions on many web applications.
A linked 2009 HP Labs report argues the ACL model cannot make correct access decisions when more than two principals interact. Required information is not retained across message sends. The authors say the gap was already documented but is not widely understood, and they connect it to clickjacking and cross-site request forgery.
- The document is HP Labs report HPL-2009-20.
- Access data needed for later decisions is dropped between message sends.
- The authors say both clickjacking and CSRF exploit that logic error.
- Organizations
- HP Labs
From the original article
The ACL model is unable to make correct access decisions for interactions involving more than two principals, since required information is not retained across message sends. Though this deficiency has long been documented in the published literature, it is not widely understood.
By shiftleft.com via fanf · shiftleft.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.