Lucene search
PRIOn knowledge basePRION:CVE-2012-4381HistoryFeb 08, 2020 - 6:15 p.m.
Authentication flaw
2020-02-0818:15:00
PRIOn knowledge base
www.prio-n.com
2
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1) which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, (2) when an authentication plugin returns a false in the strict function, could allow remote attackers to use old passwords for non-existing accounts in an external authentication system via unspecified vectors.
References
osvdb.org/show/osvdb/85106
www.openwall.com/lists/oss-security/2012/08/31/10
www.openwall.com/lists/oss-security/2012/08/31/6
bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330
bugzilla.redhat.com/show_bug.cgi?id=853442
lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.html
phabricator.wikimedia.org/T41184
Related
cvelist
cvelist
CVE-2012-4381
2020-02-08 17:50:40
nvd
nvd
CVE-2012-4381
2020-02-08 18:15:11
ubuntucve
ubuntucve
CVE-2012-4381
2020-02-08 00:00:00
cve
cve
CVE-2012-4381
2020-02-08 18:15:11
debiancve
debiancve
CVE-2012-4381
2020-02-08 18:15:11
nessus
nessus
FreeBSD : mediawiki -- multiple vulnerabilities (7c0fecd6-f42f-11e1-b17b-000c2977ec30)
2012-09-04 00:00:00
MediaWiki < 1.18.5 / 1.19.2 Multiple Vulnerabilities
2012-09-27 00:00:00
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2012-08-27 00:00:00
openvas
openvas
FreeBSD Ports: mediawiki
2012-09-07 00:00:00
FreeBSD Ports: mediawiki
2012-09-07 00:00:00