IITGN-CS431 / project-cns

1 stars 27 forks source link

Security Bug (Group-2): Client was able to send commands even after the server is shut down and has the power to shut the server down #322

Closed VenkatReddybathuni closed 2 days ago

VenkatReddybathuni commented 3 days ago

In the first part of the below attached image, the server was started and was shut down. Later I was able to send commands from the client and it was actually getting updated. U can see the commands I sent in client image and the recieved command message confirming the commands execution.

image

image

Later when I shut down the server, it still accepted commands like in the above explanation but wierdly the server was shutdown when I shutdown the client automatically.

image

image

Conclusion: When I try to shut down the server it wont shut down but when I shut down the client after I attempt to shut down the server, server shuts down leaving a serious security flaw in controlling the servers operation.

naveeeeeeeeeen commented 3 days ago

Bug Resolved

Screenshot from 2024-11-20 14-31-22