PT-2018-10551 · Symfony+1 · Symfony+1

Théo Bougé · Publicado 2018-06-13 · Atualizado 2022-05-14 · CVE-2018-11407

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symfony versions 2.8.x through 2.8.36 Symfony versions 3.3.x through 3.3.16 Symfony versions 3.4.x through 3.4.6 Symfony versions 4.0.x through 4.0.6

Description An issue in the Ldap component allows remote attackers to bypass authentication by logging in with a "null" password and valid username, triggering an unauthenticated bind. This issue exists because of an incomplete fix for a previous authentication bypass vulnerability.

Recommendations For Symfony versions 2.8.x through 2.8.36, update to version 2.8.37 or later. For Symfony versions 3.3.x through 3.3.16, update to version 3.3.17 or later. For Symfony versions 3.4.x through 3.4.6, update to version 3.4.7 or later. For Symfony versions 4.0.x through 4.0.6, update to version 4.0.7 or later.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-11407

GHSA-35C5-28PG-2QG4

USN-4836-1

Produtos afetados

Symfony

Ubuntu

Referências · 18

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-core/CVE-2018-11407.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2018-11407.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2018-11407.yaml · Exploit
• https://github.com/symfony/symfony · Nota
• https://github.com/symfony/symfony/commit/b46fc93785d37ffa5d706a82cd175b33ce8f2934 · Nota
• https://github.com/symfony/symfony/pull/27377 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-11407 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-11407 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4836-1 · Aviso do Fabricante
• https://symfony.com/cve-2018-11407 · Nota
• https://osv.dev/vulnerability/GHSA-35c5-28pg-2qg4 · Aviso do Fabricante
• https://symfony.com/blog/cve-2018-11407-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-11407 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11407 · Nota de Segurança
• https://osv.dev/vulnerability/USN-4836-1 · Aviso do Fabricante