CVE-2015-6928: Medium severity cubecart vulnerability

Published Sep 28, 2015

Updated

classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request was made, which allows remote attackers to change the administrator password via a recovery request with a space character in the validate parameter and the administrator email in the email parameter.

Affected Software

11 affected components

Cubecart CubeCart=5.2.12

Cubecart CubeCart=5.2.13

Cubecart CubeCart=5.2.14

Cubecart CubeCart=5.2.15

Cubecart CubeCart=6.0.0

Cubecart CubeCart=6.0.1

Cubecart CubeCart=6.0.2

Cubecart CubeCart=6.0.3

Cubecart CubeCart=6.0.4

Cubecart CubeCart=6.0.5

Cubecart CubeCart=6.0.6

Remediation

Patch Available

https://forums.cubecart.com/topic/50277-critical-security-issue-admin-account-hijack/

Event History

Sep 28, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6928?

CVE-2015-6928 has a moderate severity rating due to the potential for remote administrative access through unauthenticated password reset requests.

How do I fix CVE-2015-6928?

To fix CVE-2015-6928, upgrade to CubeCart version 6.0.7 or later, where the password reset mechanism has been properly validated.

What versions are affected by CVE-2015-6928?

CVE-2015-6928 affects CubeCart versions 5.2.12 to 5.2.16, and all 6.x versions before 6.0.7.

What type of vulnerability is CVE-2015-6928?

CVE-2015-6928 is an unauthorized access vulnerability that allows attackers to change administrator passwords.

Is CVE-2015-6928 easily exploitable?

Yes, CVE-2015-6928 can be easily exploited by sending a specially crafted password reset request with a space character in the validate parameter.