Detections
Analytics
Joomla! 1.7.x < 3.8.0 Multiple Vulnerabilities
critical Web App Scanning Plugin ID 98460
Language:
Synopsis
Joomla! 1.7.x < 3.8.0 Multiple VulnerabilitiesDescription
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities :- A flaw exists related to SQL query handling that allows disclosure of article introduction text when such articles are in the archived state. Note that only versions 3.7.0 through 3.7.5 are affected by this flaw. (CVE-2017-14595)
- An input-validation flaw exists in the LDAP authentication plugin that allows disclosure of usernames and passwords. Note that Joomla! must be configured for LDAP authentication to be affected. (CVE-2017-14596)
Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update to Joomla! version 3.8.0 or latest.See Also
https://developer.joomla.org/security-centre/711-20170902-core-ldap-information-disclosure
https://www.joomla.org/announcements/release-news/5713-joomla-3-8-0-release.html
Plugin Details
Severity: Critical
ID: 98460
Type: Version Based
Family: Component Vulnerability
Published: 11/5/2018
Updated: 3/14/2023
Scan Template: api, basic, full, pci, quick, scan
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.15
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2017-14596
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score Source: CVE-2017-14596
Vulnerability Information
CPE: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/20/2017
Vulnerability Publication Date: 9/18/2017
Reference Information
CVE: CVE-2017-14595, CVE-2017-14596
OWASP: 2010-A1, 2010-A4, 2010-A6, 2013-A1, 2013-A4, 2013-A5, 2013-A9, 2017-A1, 2017-A5, 2017-A6, 2017-A9, 2021-A1, 2021-A3, 2021-A6, 2025-A1, 2025-A5, 2025-A6
WASC: Improper Input Handling, Information Leakage, LDAP Injection
CAPEC: 100, 116, 13, 136, 169, 22, 224, 230, 231, 285, 287, 290, 291, 292, 293, 294, 295, 296, 297, 298, 299, 300, 301, 302, 303, 304, 305, 306, 307, 308, 309, 310, 312, 313, 317, 318, 319, 320, 321, 322, 323, 324, 325, 326, 327, 328, 329, 330, 472, 497, 508, 573, 574, 575, 576, 577, 59, 60, 616, 643, 646, 651, 79
DISA STIG: APSC-DV-000460, APSC-DV-002560, APSC-DV-002630, APSC-DV-003235
HIPAA: 164.306(a)(1), 164.306(a)(2)
ISO: 27001-A.14.2.5
NIST: sp800_53-CM-6b, sp800_53-SI-10, sp800_53-SI-15
OWASP API: 2019-API7, 2019-API8, 2023-API8
OWASP ASVS: 4.0.2-14.2.1, 4.0.2-5.3.7, 4.0.2-8.3.4