PT-2019-11674 · WordPress · Ultimate Member

Clément Cruchet · Publicado 2019-06-21 · Atualizado 2023-04-17 · CVE-2019-10270

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ultimate Member plugin version 2.39 for WordPress

Description An issue was discovered in the password reset functionality, allowing an attacker to reset the password of another user without proper verification. This is possible because the user id parameter is not properly correlated with the reset password key sent by email. An attacker can intercept the password modification request and modify the user id to target any user, including admins, potentially leading to account compromise and privilege escalation.

Recommendations For Ultimate Member plugin version 2.39, consider disabling the password reset functionality until a patch is available to prevent exploitation. Restrict access to the password modification request to minimize the risk of interception and modification of the user id parameter.

Exploit

Correção

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2019-10270

Produtos afetados

Ultimate Member

Referências · 3

• 🔥 https://cxsecurity.com/issue/WLB-2019060101 · Exploit
• https://osv.dev/vulnerability/CVE-2019-10270 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10270 · Nota de Segurança