CVE-2018-0505: BotPasswords can bypass CentralAuth's account lock
First published: Thu Sep 20 2018(Updated: )
As reported: A flaw was found in mediawiki where a unpriviliged login may bypass account lock. Upstream bug: <a href="https://phabricator.wikimedia.org/T194605">https://phabricator.wikimedia.org/T194605</a> References: <a href="https://lists.wikimedia.org/pipermail/mediawiki-announce/2018-September/000223.html">https://lists.wikimedia.org/pipermail/mediawiki-announce/2018-September/000223.html</a>
Credit: security@debian.org security@debian.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| composer/mediawiki/core | >=1.27.0<1.27.5>=1.29.0<1.29.3>=1.30.0<1.30.1>=1.31.0<1.31.1 | |
| debian/mediawiki | 1:1.31.16-1+deb10u2 1:1.31.16-1+deb10u6 1:1.35.11-1~deb11u1 1:1.35.13-1~deb11u1 1:1.39.4-1~deb12u1 1:1.39.5-1~deb12u1 1:1.39.5-1 | |
| redhat/mediawiki | <1.31.1 | 1.31.1 |
| redhat/mediawiki | <1.30.1 | 1.30.1 |
| redhat/mediawiki | <1.29.3 | 1.29.3 |
| redhat/mediawiki | <1.27.5 | 1.27.5 |
| composer/mediawiki/core | >=1.31.0<1.31.1 | 1.31.1 |
| composer/mediawiki/core | >=1.30.0<1.30.1 | 1.30.1 |
| composer/mediawiki/core | >=1.29.0<1.29.3 | 1.29.3 |
| composer/mediawiki/core | >=1.27.0<1.27.5 | 1.27.5 |
| Wikimedia MediaWiki | >=1.31.0<1.31.1 | |
| Wikimedia MediaWiki | =1.27.5 | |
| Wikimedia MediaWiki | =1.29.3 | |
| Wikimedia MediaWiki | =1.30.1 | |
| Debian GNU/Linux | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://phabricator.wikimedia.org/T194605
- https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
- https://security-tracker.debian.org/tracker/CVE-2018-0505
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2018-September/000223.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1634167
- https://access.redhat.com/errata/RHSA-2019:3142
- https://access.redhat.com/security/cve/cve-2018-0505
- https://access.redhat.com/errata/RHSA-2019:3238
- https://access.redhat.com/errata/RHSA-2019:3813
- https://bugzilla.redhat.com/show_bug.cgi?id=1634166
- http://www.securitytracker.com/id/1041695
- https://www.debian.org/security/2018/dsa-4301
- https://nvd.nist.gov/vuln/detail/CVE-2018-0505
- https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0505.yaml
- https://github.com/advisories/GHSA-5c6w-f4w2-2grp (Advisory)
Frequently Asked Questions
What is the severity of CVE-2018-0505?
CVE-2018-0505 is considered to be a moderate severity vulnerability as it allows an unprivileged login to bypass account lock mechanisms.
How do I fix CVE-2018-0505?
To fix CVE-2018-0505, users should update their MediaWiki installation to versions 1.27.6, 1.29.4, 1.30.2, 1.31.2 or apply the appropriate patches as indicated in the security advisories.
Which versions of MediaWiki are affected by CVE-2018-0505?
CVE-2018-0505 affects MediaWiki versions from 1.27.0 to 1.31.1 but specifically includes versions up to 1.31.1 without 1.31.2 or later.
Is there a workaround for CVE-2018-0505?
Currently, there are no specific workarounds for CVE-2018-0505; updating to the latest version is the recommended action.
What are the implications of CVE-2018-0505 on user accounts?
CVE-2018-0505 poses a risk where attackers might exploit the vulnerability to gain unauthorized access to user accounts that should be locked out.
- collector/friends-of-php
- collector/security-tracker-debian
- agent/type
- agent/remedy
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-0505
- agent/software-canonical-lookup
- agent/weakness
- agent/description
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-5c6w-f4w2-2grp
- agent/severity
- agent/references
- agent/author
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/trending
- agent/source
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- package-manager/composer
- package-manager/debian
- package-manager/redhat
- vendor/mediawiki
- canonical/wikimedia mediawiki
- version/wikimedia mediawiki/1.31.0
- version/wikimedia mediawiki/1.27.5
- version/wikimedia mediawiki/1.29.3
- version/wikimedia mediawiki/1.30.1
- vendor/debian
- canonical/debian gnu/linux
- version/debian gnu/linux/9.0