SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2011-1766

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and…

MEDIUM 5.8EPSS 2.23%

Does this matter?

Lower severity and a low EPSS score (2.23%). Track it; it rarely justifies an emergency change on its own.

Description

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an unattended workstation.

CVSS 2.0
5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS
2.23% probability · 82th percentile
CISA KEV
Not listed
Weakness
CWE-287
Affected
mediawiki/mediawiki
Source
secalert@redhat.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.