PT-2021-17667 · Mautic · Mautic

Michaellrowley + 2 · Published 2021-08-30 · Updated 2021-09-03 · CVE-2021-27913

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 3.3.4 Mautic versions prior to 4.0.0

Description: The function mt rand is used to generate session tokens, which is cryptographically flawed due to its pseudorandom nature. An attacker can exploit this flaw to enumerate session tokens for accounts not under their control. This could allow an attacker to takeover accounts at random by enumerating and using access tokens.

Recommendations: For Mautic versions prior to 3.3.4, update to version 3.3.4 or later. For Mautic versions prior to 4.0.0, update to version 4.0.0 or later. As a temporary workaround, consider disabling the use of mt rand for generating session tokens until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation. Avoid using the mt rand function for security-critical operations until the issue is resolved.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-338

CWE-327

Related Identifiers

CVE-2021-27913

GHSA-X7G2-WRRP-R6H3

Affected Products

Mautic

References · 9

• 🔥 https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3 · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-27913.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27913 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27913 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x7g2-wrrp-r6h3 · Vendor Advisory
• https://github.com/mautic/mautic · Note
• https://github.com/mautic/mautic/commit/d1cad766a2de74e6c6b89d6d78c2a5f2e36ba91c · Note
• https://t.me/cvenotify/20640 · Telegram Post
• https://t.me/cvenotify/20366 · Telegram Post