CVE-2017-5493

MEDIUM

Description

wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers to bypass intended access restrictions via a crafted (1) site signup or (2) user signup.

References

http://www.debian.org/security/2017/dsa-3779

http://www.openwall.com/lists/oss-security/2017/01/14/6

http://www.securityfocus.com/bid/95401

http://www.securitytracker.com/id/1037591

https://codex.wordpress.org/Version_4.7.1

https://github.com/WordPress/WordPress/commit/cea9e2dc62abf777e06b12ec4ad9d1aaa49b29f4

https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/

https://wpvulndb.com/vulnerabilities/8721

Details

Source: MITRE

Published: 2017-01-15

Updated: 2019-10-03

Type: CWE-338

Risk Information

CVSS v2.0

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

CVSS v3.0

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH