OATHAuth Extension up to 1.31.9/1.32.x/1.34.3 on MediaWiki Multiple Requests improper authentication

Summaryinfo

A vulnerability was found in OATHAuth Extension up to 1.31.9/1.32.x/1.34.3 on MediaWiki and classified as problematic. Affected is an unknown function. Executing a manipulation as part of Multiple Requests can lead to improper authentication. This vulnerability is registered as CVE-2020-25827. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in OATHAuth Extension up to 1.31.9/1.32.x/1.34.3 on MediaWiki and classified as problematic. This vulnerability affects an unknown code. The manipulation as part of a Multiple Requests leads to a improper authentication vulnerability. The CWE definition for the vulnerability is CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. As an impact it is known to affect confidentiality. CVE summarizes:

An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster (such as via CentralAuth), rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across many wikis/sites concurrently.

The weakness was published 09/27/2020 (Website). The advisory is shared for download at lists.wikimedia.org. This vulnerability was named CVE-2020-25827 since 09/23/2020. The exploitation appears to be difficult. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 248442 (Linux Distros Unpatched Vulnerability : CVE-2020-25827), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.31.10 or 1.34.4 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (248442). Similar entries are available at VDB-162036, VDB-162037, VDB-162038 and VDB-162039. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• OATHAuth Extension

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.31.0
• 1.31.1
• 1.31.2
• 1.31.3
• 1.31.4
• 1.31.5
• 1.31.6
• 1.31.7
• 1.31.8
• 1.31.9
• 1.32
• 1.34.0
• 1.34.1
• 1.34.2
• 1.34.3

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion