PT-2017-7310 · Mediawiki+1 · Mediawiki Extension:Oauth+1

Sitic · Publicado 2015-10-29 · Atualizado 2017-09-15 · CVE-2015-8009

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki Extension:OAuth versions 1.25.x before 1.25.3 MediaWiki Extension:OAuth versions 1.24.x before 1.24.4 MediaWiki Extension:OAuth versions prior to 1.23.11

Description The issue concerns the MWOAuthDataStore::lookup token function in MediaWiki's Extension:OAuth, which fails to properly validate the signature when checking the authorization signature. This allows remote registered Consumers to use another Consumer's credentials by leveraging knowledge of the credentials.

Recommendations For MediaWiki Extension:OAuth versions 1.25.x before 1.25.3, update to version 1.25.3 or later. For MediaWiki Extension:OAuth versions 1.24.x before 1.24.4, update to version 1.24.4 or later. For MediaWiki Extension:OAuth versions prior to 1.23.11, update to version 1.23.11 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

ALT-PU-2015-1935

CVE-2015-8009

Produtos afetados

Alt Linux

Mediawiki Extension:Oauth

Referências · 31

• 🔥 https://phabricator.wikimedia.org/T103023 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6728 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8002 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2938 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8009 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8009 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6733 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2935 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2937 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-8009 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6734 · Nota de Segurança
• https://phabricator.wikimedia.org/T85850 · Nota
• http://openwall.com/lists/oss-security/2015/10/29/14 · Nota
• http://securitytracker.com/id/1034028 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2015-8009 · Nota