PT-2014-2771 · Mediawiki · Mediawiki Centralauth Extension

Anomie · Publicado 2014-01-26 · Atualizado 2017-08-29 · CVE-2013-4304

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MediaWiki CentralAuth extension versions 1.19.x through 1.19.7 MediaWiki CentralAuth extension versions 1.20.x through 1.20.6 MediaWiki CentralAuth extension versions 1.21.x through 1.21.1

Description The issue allows remote attackers to bypass authentication without a password by exploiting a caching mechanism in the CentralAuth extension. This occurs because a valid CentralAuthUser object is cached in the centralauth User cookie even when a user has not successfully logged in.

Recommendations For MediaWiki CentralAuth extension versions 1.19.x through 1.19.7, update to version 1.19.8 or later. For MediaWiki CentralAuth extension versions 1.20.x through 1.20.6, update to version 1.20.7 or later. For MediaWiki CentralAuth extension versions 1.21.x through 1.21.1, update to version 1.21.2 or later.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-4304

Produtos afetados

Mediawiki Centralauth Extension

Referências · 8

• 🔥 https://bugzilla.wikimedia.org/show_bug.cgi?id=52338 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86894 · Nota
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html · Correção
• http://secunia.com/advisories/54723 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4304 · Nota
• http://osvdb.org/96910 · Nota
• http://seclists.org/oss-sec/2013/q3/553 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4304 · Nota de Segurança