Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8627

Опубликовано: 23 мар. 2017
Источник: nvd
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly normalize IP addresses containing zero-padded octets, which might allow remote attackers to bypass intended access restrictions by using an IP address that was not supposed to have been allowed.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Версия до 1.23.11 (включая)
cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*

EPSS

Процентиль: 62%
0.00429
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

ubuntu логотип

CVE-2015-8627

CVSS3: 5.3
ubuntu
почти 9 лет назад

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly normalize IP addresses containing zero-padded octets, which might allow remote attackers to bypass intended access restrictions by using an IP address that was not supposed to have been allowed.

debian логотип

CVE-2015-8627

CVSS3: 5.3
debian
почти 9 лет назад

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, ...

github логотип

GHSA-325x-4hm2-p3wf

CVSS3: 5.3
github
больше 3 лет назад

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly normalize IP addresses containing zero-padded octets, which might allow remote attackers to bypass intended access restrictions by using an IP address that was not supposed to have been allowed.

EPSS

Процентиль: 62%
0.00429
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284