PT-2016-7600 · Open Source Matters · Joomla!

Davide Tampellini · Publicado 2016-11-04 · Atualizado 2016-11-07 · CVE-2016-8869

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.6.4

Description The issue concerns the register method in the UsersModelRegistration class, which allows remote attackers to gain privileges. This is due to the incorrect use of unfiltered data when registering on a site.

Recommendations For versions prior to 3.6.4, update to version 3.6.4 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-8869

Produtos afetados

Joomla!

Referências · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/joomla_registration_privesc.rb · Exploit
• 🔥 https://github.com/rustyJ4ck/JoomlaCVE20168869 · Exploit
• 🔥 https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html · Exploit
• 🔥 https://exploit-db.com/exploits/40637 · Exploit
• 🔥 https://medium.com/@showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r · Exploit
• https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcf · Correção
• https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r · Nota
• https://developer.joomla.org/security-centre/660-20161002-core-elevated-privileges.html · Aviso do Fabricante
• http://securityfocus.com/bid/93883 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8869 · Nota de Segurança
• http://securitytracker.com/id/1037108 · Nota
• https://osv.dev/vulnerability/CVE-2016-8869 · Aviso do Fabricante
• http://rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8869 · Nota