CVE-2011-1766

2011-05-2322:55:01

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.018

Percentile

88.1%

JSON

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an unattended workstation.

OSVersionArchitecturePackageVersionFilename
Debian12allmediawiki< 1:1.39.7-1~deb12u1mediawiki_1:1.39.7-1~deb12u1_all.deb
Debian11allmediawiki< 1:1.35.13-1+deb11u2mediawiki_1:1.35.13-1+deb11u2_all.deb
Debian999allmediawiki< 1:1.39.8-1mediawiki_1:1.39.8-1_all.deb
Debian13allmediawiki< 1:1.39.8-1mediawiki_1:1.39.8-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mediawiki	< 1:1.39.7-1~deb12u1	mediawiki_1:1.39.7-1~deb12u1_all.deb
Debian	11	all	mediawiki	< 1:1.35.13-1+deb11u2	mediawiki_1:1.35.13-1+deb11u2_all.deb
Debian	999	all	mediawiki	< 1:1.39.8-1	mediawiki_1:1.39.8-1_all.deb
Debian	13	all	mediawiki	< 1:1.39.8-1	mediawiki_1:1.39.8-1_all.deb