In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis
    behind a caching server using the img_auth.php image authorization security feature may have had their
    files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and
    Vary headers were mishandled. (CVE-2020-15005)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis     behind a caching server using the img_auth.php image authorization security feature may have had their     files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and     Vary headers were mishandled. (CVE-2020-15005)

Note that Nessus relies on the presence of the package as reported by the vendor.

Multiple security issues were discovered in MediaWiki, a website engine for collaborative work.

CVE-2020-15005

Private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them.

CVE-2020-35477

Blocks legitimate attempts to hide log entries in some situations.

CVE-2020-35479

Allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is always unsafe for HTML in a month value.

CVE-2020-35480

Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the viewer cannot see are handled differently, exposing sensitive information about the hidden status to unprivileged viewers.

For Debian 9 stretch, these problems have been fixed in version 1:1.27.7-1~deb9u7.

We recommend that you upgrade your mediawiki packages.

For the detailed security status of mediawiki please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/mediawiki

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues were discovered in MediaWiki, a website engine for collaborative work: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate limiting against brute force attempts.

https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-June/000 252.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
433141	SCA: security update for mediawiki/core (GHSA-xpv7-93cm-4mxv)	Tenable Cloud Security	SCA Checks	low
433141	SCA: security update for mediawiki/core (GHSA-xpv7-93cm-4mxv)	Tenable Self-Hosted Container Security	SCA Checks	low
247730	Linux Distros Unpatched Vulnerability : CVE-2020-15005	Nessus	Misc.	low
144574	Debian DLA-2504-1 : mediawiki security update	Nessus	Debian Local Security Checks	medium
140811	Debian DSA-4767-1 : mediawiki - security update	Nessus	Debian Local Security Checks	high
138115	Fedora 32 : mediawiki (2020-9c97633708)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2020-15005

low

Tenable Plugins

low

low

low

medium

high

low