CVE-2015-8008
high
CVSS v3
7.5
CVSS v2
5.0
VIR risk
7.5
Description
The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP address access restrictions by making an API request with an existing token.
Predictions
Exploit likelihood
83%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — https://phabricator.wikimedia.org/T103022
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| fedora | 21 | affected | |
| fedora | 22 | affected | |
| fedora | 23 | affected | |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| mediawiki | mediawiki | {"endExcluding":"1.25.3"} | 1.25.3 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170961.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170979.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171007.html
- http://www.openwall.com/lists/oss-security/2015/10/29/14
- http://www.securityfocus.com/bid/77379
- http://www.securitytracker.com/id/1034028
- https://bugzilla.redhat.com/show_bug.cgi?id=1273353
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000182.html
- https://phabricator.wikimedia.org/T103022
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170961.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170979.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171007.html
- http://www.openwall.com/lists/oss-security/2015/10/29/14
- http://www.securityfocus.com/bid/77379
- http://www.securitytracker.com/id/1034028
- https://bugzilla.redhat.com/show_bug.cgi?id=1273353
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000182.html
- https://phabricator.wikimedia.org/T103022
CWEs
CWE-284
Verify integrity in audit chain (admin only). AS-IS.