Description

WordPress is prone to a security bypass vulnerability because it fails to adequately restrict access to the password reset feature. An attacker can exploit this issue to reset the administrator password of the application. Repeated attacks may allow the attacker to cause persistent Denial of Service conditions. WordPress version 2.8.3 is vulnerable; prior versions may also be affected.

Remediation

Update to WordPress version 2.8.4 or latest

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html

http://blog.sucuri.net/2009/08/wordpress-2-8-3-remote-admin-reset-password.html

http://packetstormsecurity.org/files/view/80258/wordpress-adminreset.txt

http://secunia.com/advisories/36237

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6035)

Piwigo CVE-2014-4648 Vulnerability (CVE-2014-4648)

WordPress Plugin Visual Form Builder Multiple Vulnerabilities (2.8.2)

Oracle Database Server CVE-2012-1746 Vulnerability (CVE-2012-1746)

Joomla! Core 2.5.x Cross-Site Scripting (2.5.0 - 2.5.3)

Severity

High

Classification

CVE-2009-2762 CWE-255 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass