CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests.

CVSS v3.0 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3.0 : MEDIUM

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://github.com/WeblateOrg/weblate/issues/1317	Issue Tracking Patch
https://github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079	Patch
https://github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst	Patch Release Notes
http://www.securityfocus.com/bid/95676	Third Party Advisory VDB Entry
http://www.openwall.com/lists/oss-security/2017/01/20/1	Mailing List Patch
http://www.openwall.com/lists/oss-security/2017/01/18/11	Mailing List Patch

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*

Information

Published : 2017-03-15 08:59

Updated : 2017-03-21 11:56

NVD link : CVE-2017-5537

Mitre link : CVE-2017-5537

JSON object : View

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

Products Affected

weblate

weblate

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/WeblateOrg/weblate/issues/1317", "name": "https://github.com/WeblateOrg/weblate/issues/1317", "tags": ["Issue Tracking", "Patch"], "refsource": "CONFIRM"}, {"url": "https://github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079", "name": "https://github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "https://github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst", "name": "https://github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst", "tags": ["Patch", "Release Notes"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/95676", "name": "95676", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://www.openwall.com/lists/oss-security/2017/01/20/1", "name": "[oss-security] 20170119 Re: CVE request Weblate: information disclosure in password reset form", "tags": ["Mailing List", "Patch"], "refsource": "MLIST"}, {"url": "http://www.openwall.com/lists/oss-security/2017/01/18/11", "name": "[oss-security] 20170118 CVE request Weblate: information disclosure in password reset form", "tags": ["Mailing List", "Patch"], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-200"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2017-5537", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}}, "publishedDate": "2017-03-15T15:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.10"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-03-21T18:56Z"}