Description

Episerver CMS is a ASP.NET web content management system and digital marketing suite.

Ektron CMS 9.20 SP2 (and older versions) allows remote attackers to access administrative pages such as (/WorkArea/activateuser.aspx) without authentication by faking the Referer HTTP header.

Remediation

Upgrade to the latest version of Ektorn CMS. This vulnerability was patched with EKTR-508 (Security enhancement for re-enabling a user).

References

Ektron Content Management System (CMS) 9.20 SP2, remote re-enabling users (CVE-2018-12596)

Related Vulnerabilities

WordPress Plugin Google Captcha (reCAPTCHA) by BestWebSoft Security Bypass (1.12)

WordPress Plugin s2Member Framework 's2_invoice' Parameter Remote Security Bypass (111105)

WordPress Plugin iThemes Security (formerly Better WP Security) Security Bypass (7.9.0)

WordPress Plugin Coditor-Code Editor Security Bypass (1.1)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.13)

Severity

High

Classification

CVE-2018-12596 CWE-285 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Authentication Bypass