PT-2021-18259 · WordPress+1 · Wp-Cli+1
Schlessera
·
Published
2021-05-19
·
Updated
2024-08-20
·
CVE-2021-29504
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions:
WP-CLI versions 0.12.0 through 2.4.x
Description:
An improper error handling in HTTPS requests management allows remote attackers to intercept the communication and disable certificate verification, gaining full control over the communication content. This includes the ability to impersonate update servers and push malicious updates towards WordPress instances or WP-CLI itself. The issue stems from the default behavior of
WP CLIUtilshttp request() when encountering a TLS handshake error, which is to disable certificate validation and retry the request.Recommendations:
For WP-CLI versions 0.12.0 through 2.4.x, update to version 2.5.0 or later to resolve the issue.
As a temporary workaround for dealing with the breaking change in commands directly affected by the new secure default behavior, add the
--insecure flag to manually opt-in to the previous insecure behavior.Exploit
Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Wp-Cli