PT-2022-11284 · Unknown · Textpattern Cms

Published 2022-06-29 · Updated 2023-08-08 · CVE-2021-40642

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Textpattern CMS versions 4.8.7 and older

Description The issue exists due to a sensitive cookie in HTTPS sessions without the 'Secure' attribute set, specifically affecting the txp login session cookie in the application via textpattern/lib/txplib misc.php. If the secure flag is not set, the cookie will be transmitted in clear-text if the user visits any HTTP URLs within the cookie's scope. An attacker may induce this event by feeding a user suitable links, either directly or via another web site.

Recommendations For Textpattern CMS versions 4.8.7 and older, consider setting the secure flag for the txp login session cookie to prevent it from being transmitted in clear-text. As a temporary workaround, restrict access to HTTP URLs within the cookie's scope to minimize the risk of exploitation.

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2021-40642

Affected Products

Textpattern Cms

References · 6

• https://github.com/textpattern/textpattern/commit/211fab0093999f59b0b61682aa988ac7d8337aa9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-40642 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40642 · Vendor Advisory
• https://huntr.dev/bounties/aadbe434-a376-443b-876f-2a1cbab7847b · Note
• https://t.me/cvenotify/32338 · Telegram Post
• https://t.me/cibsecurity/45354 · Telegram Post