An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is
    possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2,
    1.31.2, 1.30.2 and 1.27.6. (CVE-2019-12472)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is     possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2,     1.31.2, 1.30.2 and 1.27.6. (CVE-2019-12472)

Note that Nessus relies on the presence of the package as reported by the vendor.

MediaWiki reports :

Security fixes : T197279, CVE-2019-12468: Directly POSTing to Special:ChangeEmail would allow for bypassing reauthentication, allowing for potential account takeover. T204729, CVE-2019-12473:
Passing invalid titles to the API could cause a DoS by querying the entire `watchlist` table. T207603, CVE-2019-12471: Loading user JavaScript from a non-existent account allows anyone to create the account, and XSS the users' loading that script. T208881: blacklist CSS var(). T199540, CVE-2019-12472: It is possible to bypass the limits on IP range blocks (`$wgBlockCIDRLimit`) by using the API.
T212118, CVE-2019-12474: Privileged API responses that include whether a recent change has been patrolled may be cached publicly. T209794, CVE-2019-12467: A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. T25227, CVE-2019-12466: An account can be logged out without using a token(CRRF) T222036, CVE-2019-12469: Exposed suppressed username or log in Special:EditTags. T222038, CVE-2019-12470: Exposed suppressed log in RevisionDelete page. T221739, CVE-2019-11358: Fix potential XSS in jQuery.

Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which may result in authentication bypass, denial of service, cross-site scripting, information disclosure and bypass of anti-spam measures.

ID	Name	Product	Family	Type	Severity
434817	SCA: security update for mediawiki/core (GHSA-7mqg-5fgh-xh4r)	Tenable Cloud Security	SCA Checks	Local	high
434817	SCA: security update for mediawiki/core (GHSA-7mqg-5fgh-xh4r)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
248258	Linux Distros Unpatched Vulnerability : CVE-2019-12472	Nessus	Misc.	Local	high
126485	FreeBSD : mediawiki -- multiple vulnerabilities (3c5a4fe0-9ebb-11e9-9169-fcaa147e860e)	Nessus	FreeBSD Local Security Checks	Local	critical
125858	Debian DSA-4460-1 : mediawiki - security update	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2019-12472

high

Tenable Plugins

high

high

high

critical

critical