CVE-2017-5487: Infoleak
wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpressto a version that resolves this vulnerability.Fixed in 4.7.1 - Compensating control
Restrict access to the WordPress REST API endpoint used for user listings (e.g., wp-json/wp/v2/users) to trusted clients/IPs until WordPress 4.7.1 is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5487?
CVE-2017-5487 has been classified as a medium severity vulnerability due to its potential to expose sensitive user information.
How do I fix CVE-2017-5487?
To fix CVE-2017-5487, update WordPress to version 4.7.1 or later.
Who is affected by CVE-2017-5487?
All users of WordPress versions 4.7 and earlier are affected by CVE-2017-5487.
What kind of information can be exposed through CVE-2017-5487?
CVE-2017-5487 can potentially expose a list of post authors and associated sensitive user information.
Does CVE-2017-5487 allow remote attacks?
Yes, CVE-2017-5487 allows remote attackers to make a request and obtain sensitive information.