CVE-2015-5246
First published: Tue Sep 01 2015(Updated: )
larry campbell reports via the foreman bug tracker: This was found on Foreman 1.9.0: I came across this issue by chance. I was forced to change my Active Directory password today. After doing so, I then (mistakenly) attempted to log onto Foreman with my previous password and was able to successfully log in. The new password also worked. I tried with other browsers and even another workstation that I had never logged onto and all attempts allowed me to log on with my non-valid previous password. Perhaps something on foreman/passenger/ruby/etc is caching my credential and not re-checking? Initial Setup: Have an Active Directory enviornment available for LDAP Authentication. Setup LDAP Authentication Source in Foreman and have a test user account created in Active Directory. Steps to recreate: 1. Log on to Foreman with the Active Directory user. This should succeed. Log off. 2. Change your Active Directory account's password. 3. Log on to Foreman with the Active Directory user, and use the previous password. This should fail with authentication denied method, however it succeeds. Upstream references: <a href="http://projects.theforeman.org/issues/11471">http://projects.theforeman.org/issues/11471</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Foreman | =1.9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://projects.theforeman.org/issues/11471
- http://serverfault.com/questions/461139/ntlm-auth-can-login-in-ad-with-both-old-and-new-passwords
- https://support.microsoft.com/en-us/kb/906305
- http://timstechnoblog.blogspot.cz/2010/02/old-password-still-valid-for-hour.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1258700
Frequently Asked Questions
What is the severity of CVE-2015-5246?
CVE-2015-5246 is classified as a medium severity vulnerability.
How do I fix CVE-2015-5246?
To fix CVE-2015-5246, upgrade Foreman to a version higher than 1.9.0 that includes the patch.
What vulnerability does CVE-2015-5246 describe?
CVE-2015-5246 describes an issue where an Active Directory user can log in with both their old and new passwords.
Which version of Foreman is affected by CVE-2015-5246?
Foreman version 1.9.0 is affected by CVE-2015-5246.
Is there a workaround for CVE-2015-5246?
There is no official workaround for CVE-2015-5246; upgrading is recommended.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/remedy
- agent/weakness
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-5246
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/theforeman
- canonical/foreman
- version/foreman/1.9.0