includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account, as demonstrated by tracking the victim's activity, related to a "login CSRF" issue.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account, as demonstrated by tracking the victim's activity, related to a "login CSRF" issue.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://bugzilla.wikimedia.org/show_bug.cgi?id=62497 | x_refsource_CONFIRM |
| http://openwall.com/lists/oss-security/2014/03/28/1 | mailing-list x_refsource_MLIST |
| http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-March/000145.html | mailing-list x_refsource_MLIST |
| http://openwall.com/lists/oss-security/2014/04/01/7 | mailing-list x_refsource_MLIST |
| https://gerrit.wikimedia.org/r/#/c/121517/1/includes/specials/SpecialChangePassword.php | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://bugzilla.wikimedia.org/show_bug.cgi?id=62497 | x_refsource_CONFIRM x_transferred |
| http://openwall.com/lists/oss-security/2014/03/28/1 | mailing-list x_refsource_MLIST x_transferred |
| http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-March/000145.html | mailing-list x_refsource_MLIST x_transferred |
| http://openwall.com/lists/oss-security/2014/04/01/7 | mailing-list x_refsource_MLIST x_transferred |
| https://gerrit.wikimedia.org/r/#/c/121517/1/includes/specials/SpecialChangePassword.php | x_refsource_CONFIRM x_transferred |
includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account, as demonstrated by tracking the victim's activity, related to a "login CSRF" issue.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 4.0 | MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-March/000145.html | cve@mitre.org | Patch Vendor Advisory |
| http://openwall.com/lists/oss-security/2014/03/28/1 | cve@mitre.org | N/A |
| http://openwall.com/lists/oss-security/2014/04/01/7 | cve@mitre.org | N/A |
| https://bugzilla.wikimedia.org/show_bug.cgi?id=62497 | cve@mitre.org | N/A |
| https://gerrit.wikimedia.org/r/#/c/121517/1/includes/specials/SpecialChangePassword.php | cve@mitre.org | Patch |
| http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-March/000145.html | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://openwall.com/lists/oss-security/2014/03/28/1 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://openwall.com/lists/oss-security/2014/04/01/7 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://bugzilla.wikimedia.org/show_bug.cgi?id=62497 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://gerrit.wikimedia.org/r/#/c/121517/1/includes/specials/SpecialChangePassword.php | af854a3a-2127-422b-91ae-364da2661108 | Patch |