A critical security misconfiguration in Sunbird-Ed SunbirdEd-portal v1.13.4 allows unauthenticated attackers to perform man-in-the-middle attacks and intercept sensitive data.

The application improperly disables TLS/SSL certificate validation by explicitly setting the rejectUnauthorized option to false within HTTP request configurations. This lack of validation allows an unauthenticated remote attacker to intercept encrypted traffic without triggering warnings.

The vulnerability carries a CVSS score of 7.5, indicating a high level of risk due to the potential for large scale data exposure. Successful exploitation allows for the compromise of confidential information transmitted over the network, which could lead to unauthorized access to user sessions or internal system communications. This flaw poses a significant threat to organizational data privacy and regulatory compliance.

Immediate Action: Audit the source code for instances of rejectUnauthorized set to false and revert these to true to enforce proper certificate validation.

Proactive Monitoring: Review network traffic logs for anomalous patterns and monitor TLS handshake failures which may indicate active interception attempts.

Compensating Controls: Implement strict network segmentation and ensure all transit traffic is monitored by an inspection-capable security gateway to detect potential interception attempts.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the research write-up referenced in the CVE record.

Given the ease with which this vulnerability can be exploited and the high potential for data interception, immediate remediation is required. Development teams must prioritize correcting the certificate validation logic in the codebase to ensure secure communication channels. Organizations relying on this portal should treat this as a high priority item until the configuration is corrected and verified.