PT-2021-16890 · Unknown · Orchard Core Cms

Published 2021-10-10 · Updated 2022-02-25 · CVE-2021-25966

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Orchard core CMS versions 1.0.0-beta1-3383 to 1.0.0

Description The issue is related to an improper session termination after a password change. When a user or an administrator changes a password, a user who was already logged in will still have access to the application, even after the password was changed.

Recommendations For versions 1.0.0-beta1-3383 to 1.0.0, consider temporarily restricting access to the application for users who have changed their passwords until a proper session termination mechanism is implemented. As a temporary workaround, consider disabling the password change feature until a patch is available. Restrict access to the application for users who were logged in before a password change to minimize the risk of exploitation.

Exploit

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2021-25966

Affected Products

Orchard Core Cms

References · 5

• 🔥 https://github.com/OrchardCMS/OrchardCore/blob/v1.0.0/src/OrchardCore.Modules/OrchardCore.Users/Controllers/ResetPasswordController.cs#L123 · Exploit
• https://osv.dev/vulnerability/CVE-2021-25966 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25966 · Security Note
• https://whitesourcesoftware.com/vulnerability-database/CVE-2021-25966 · Note
• https://t.me/cvenotify/22230 · Telegram Post