Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Credentials Management Errors Vulnerability - CVE-2015-8009 - Vulnerability Database
MediaWiki

MediaWiki Credentials Management Errors Vulnerability - CVE-2015-8009

Critical
Reference: CVE-2015-8009
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-8009
Title: MediaWiki Credentials Management Errors Vulnerability
Overview:

The MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3 1.24.x before 1.24.4 and before 1.23.11 does not properly validate the signature when checking the authorization signature which allows remote registered Consumers to use another Consumer39s credentials by leveraging knowledge of the credentials.