PT-2018-11160 · Ldap Tool Box · Ltb Self Service Password

Coudot · Publicado 2018-06-14 · Atualizado 2018-08-10 · CVE-2018-12421

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LTB (aka LDAP Tool Box) Self Service Password versions prior to 1.3

Description The issue allows a change to a user password without knowing the old password via a crafted POST request. This is due to the mishandling of the ldap bind return value and the lack of constraint on the PHP data type to be a string.

Recommendations For versions prior to 1.3, update to version 1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the password change functionality until the update is applied.

Correção

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2018-12421

Produtos afetados

Ltb Self Service Password

Referências · 5

• https://github.com/ltb-project/self-service-password/issues/209 · Nota
• https://github.com/ltb-project/self-service-password/issues/211 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12421 · Nota de Segurança
• https://lists.ltb-project.org/pipermail/ltb-announce/2018-June/000023.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12421 · Aviso do Fabricante