Description

WordPress is prone to a security bypass vulnerability because it fails to adequately restrict access to the password reset feature. An attacker can exploit this issue to reset the administrator password of the application. Repeated attacks may allow the attacker to cause persistent Denial of Service conditions. WordPress version 2.8.3 is vulnerable; prior versions may also be affected.

Remediation

Update to WordPress version 2.8.4 or latest

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html

http://blog.sucuri.net/2009/08/wordpress-2-8-3-remote-admin-reset-password.html

http://packetstormsecurity.org/files/view/80258/wordpress-adminreset.txt

http://secunia.com/advisories/36237

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-19910)

WordPress Plugin WassUp Real Time Analytics 'spy.php' SQL Injection (1.4.3)

Oracle Application Server Other Vulnerability (CVE-2006-5354)

SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-8742)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3674)

Severity

High

Classification

CVE-2009-2762 CWE-255 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass