PT-2012-3667 · WordPress · Wordpress

Ivano Binetti · Publicado 2012-05-03 · Atualizado 2024-08-06 · CVE-2012-1936

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WordPress versions 3.3.1 and earlier

Description The issue is related to the wp create nonce function, which associates a nonce with a user account instead of a user session. This might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and objects by sniffing the network. Attacks can be demonstrated against the "wp-admin/admin-ajax.php" and "wp-admin/user-new.php" scripts. The vendor reportedly disputes the significance of this issue, stating that wp create nonce operates as intended.

Recommendations For WordPress versions 3.3.1 and earlier, consider updating to a newer version to mitigate the risk of CSRF attacks. As a temporary workaround, restrict access to the "wp-admin/admin-ajax.php" and "wp-admin/user-new.php" scripts to minimize the risk of exploitation. Avoid using the wp create nonce function until the issue is resolved.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2012-1936

Produtos afetados

Wordpress

Referências · 8

• 🔥 https://exploit-db.com/exploits/18791 · Exploit
• 🔥 http://webapp-security.com/wp-content/uploads/2012/04/Wordpress-3.3.1-Multiple-CSRF-Vulnerabilities6.txt · Exploit
• 🔥 http://exploit-db.com/exploits/18791 · Exploit
• http://securityfocus.com/bid/53280 · Nota
• https://t.me/cvenotify/89502 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2012-1936 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1936 · Nota
• http://webapp-security.com/2012/04/wordpress-3-3-1-multiple-csrf-vulnerabilities · Nota