PT-2018-4381 · Bywater Solutions · Koha

Bernhard Garn + 3 · Published 2018-10-18 · Updated 2018-12-04 · CVE-2015-4630

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Koha versions 3.14.x through 3.14.15 Koha versions 3.16.x through 3.16.11 Koha versions 3.18.x through 3.18.07 Koha versions 3.20.x through 3.20.0

Description The issue allows remote attackers to hijack the authentication of administrators for requests that create a user via a request to "members/memberentry.pl" or give a user superlibrarian permission via a request to "members/member-flags.pl". Additionally, it allows the hijacking of the authentication of arbitrary users for requests that conduct cross-site scripting (XSS) attacks via the addshelf parameter to "opac-shelves.pl".

Recommendations For Koha versions 3.14.x through 3.14.15, update to version 3.14.16 or later. For Koha versions 3.16.x through 3.16.11, update to version 3.16.12 or later. For Koha versions 3.18.x through 3.18.07, update to version 3.18.08 or later. For Koha versions 3.20.x through 3.20.0, update to version 3.20.1 or later.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-4630

Affected Products

Koha

References · 11

• 🔥 https://exploit-db.com/exploits/37389 · Exploit
• 🔥 https://packetstormsecurity.com/files/132458/Koha-ILS-3.20.x-CSRF-XSS-Traversal-SQL-Injection.html · Exploit
• 🔥 https://seclists.org/fulldisclosure/2015/Jun/80 · Exploit
• 🔥 https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 · Exploit
• https://koha-community.org/security-release-koha-3-18-8 · Vendor Advisory
• https://koha-community.org/security-release-koha-3-20-1 · Vendor Advisory
• https://koha-community.org/koha-3-14-16-released · Vendor Advisory
• https://koha-community.org/security-release-koha-3-16-12 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-4630 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4630 · Note
• https://sba-research.org/2015/06/24/researchers-of-sba-research-found-several-critical-security-vulnerabilities-in-the-koha-library-software-via-combinatorial-testing · Note