PT-2014-2771 · Mediawiki · Mediawiki Centralauth Extension

Anomie · Published 2014-01-26 · Updated 2017-08-29 · CVE-2013-4304

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MediaWiki CentralAuth extension versions 1.19.x through 1.19.7 MediaWiki CentralAuth extension versions 1.20.x through 1.20.6 MediaWiki CentralAuth extension versions 1.21.x through 1.21.1

Description The issue allows remote attackers to bypass authentication without a password by exploiting a caching mechanism in the CentralAuth extension. This occurs because a valid CentralAuthUser object is cached in the centralauth User cookie even when a user has not successfully logged in.

Recommendations For MediaWiki CentralAuth extension versions 1.19.x through 1.19.7, update to version 1.19.8 or later. For MediaWiki CentralAuth extension versions 1.20.x through 1.20.6, update to version 1.20.7 or later. For MediaWiki CentralAuth extension versions 1.21.x through 1.21.1, update to version 1.21.2 or later.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-4304

Affected Products

Mediawiki Centralauth Extension

References · 8

• 🔥 https://bugzilla.wikimedia.org/show_bug.cgi?id=52338 · Exploit
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2013-4304 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86894 · Note
• http://secunia.com/advisories/54723 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4304 · Note
• http://osvdb.org/96910 · Note
• http://seclists.org/oss-sec/2013/q3/553 · Note