PT-2017-14149 · Apache · Apache Sling Authentication Service

Published 2017-12-18 · Updated 2022-05-14 · CVE-2017-15700

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Sling Authentication Service version 1.4.0

Description A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method allows an attacker to trick a victim into sending over their credentials through the Sling login form.

Recommendations For Apache Sling Authentication Service version 1.4.0, consider disabling the org.apache.sling.auth.core.AuthUtil#isRedirectValid method until a patch is available. Restrict access to the Sling login form to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-15700

GHSA-VCVP-89FQ-HWJ8

Affected Products

Apache Sling Authentication Service

References · 6

• https://osv.dev/vulnerability/GHSA-vcvp-89fq-hwj8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-15700 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15700 · Security Note
• https://github.com/apache/sling-org-apache-sling-auth-core · Note
• https://lists.apache.org/thread.html/182bed1dd6933824a81cc5f07639eeb813fbd8f2cc49d51b452ab621@%3Cdev.sling.apache.org%3E · Note
• https://lists.apache.org/thread.html/182bed1dd6933824a81cc5f07639eeb813fbd8f2cc49d51b452ab621%40%3Cdev.sling.apache.org%3E · Note