Description

The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a valid CentralAuthUser object in the centralauth_User cookie even when a user has not successfully logged in, which allows remote attackers to bypass authentication without a password.

Remediation

References

CVE-2013-4304

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4956)

WordPress Plugin Contact Form Clean and Simple Cross-Site Scripting (4.4.0)

WordPress Plugin Easy Contact Form Lite 'sort_row.request.php' SQL Injection (1.0.7)

Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2212)

WordPress Plugin Facebook Like Box Multiple Vulnerabilities (2.9.1)

Severity

High

Classification

CVE-2013-4304 CWE-287

Tags

Missing Update Known Vulnerabilities