PT-2017-7310 · Mediawiki+1 · Mediawiki Extension:Oauth+1

Sitic · Published 2015-10-29 · Updated 2017-09-15 · CVE-2015-8009

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki Extension:OAuth versions 1.25.x before 1.25.3 MediaWiki Extension:OAuth versions 1.24.x before 1.24.4 MediaWiki Extension:OAuth versions prior to 1.23.11

Description The issue concerns the MWOAuthDataStore::lookup token function in MediaWiki's Extension:OAuth, which fails to properly validate the signature when checking the authorization signature. This allows remote registered Consumers to use another Consumer's credentials by leveraging knowledge of the credentials.

Recommendations For MediaWiki Extension:OAuth versions 1.25.x before 1.25.3, update to version 1.25.3 or later. For MediaWiki Extension:OAuth versions 1.24.x before 1.24.4, update to version 1.24.4 or later. For MediaWiki Extension:OAuth versions prior to 1.23.11, update to version 1.23.11 or later.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

ALT-PU-2015-1935

CVE-2015-8009

Affected Products

Alt Linux

Mediawiki Extension:Oauth

References · 31

• 🔥 https://phabricator.wikimedia.org/T103023 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6728 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8002 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2938 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8009 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6733 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2935 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2937 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-8009 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6734 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6727 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1935 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8004 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2933 · Security Note