CVE-2012-4382

CVE-2012-4382

EPSS 1.2%

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330 https://lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.html https://phabricator.wikimedia.org/T41823 http://www.openwall.com/lists/oss-security/2012/08/31/10 http://www.openwall.com/lists/oss-security/2012/08/31/6