Описание
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
Sensitive information is exposed to unprivileged users in mailman. The hash of the list admin password is used to derive the CSRF (Cross-site Request Forgery) token, which is exposed to unprivileged members of a list. Malicious members may use the CSRF token to perform an offline brute-force attack to retrieve the list admin password.
Отчет
This issue did not affect the versions of mailman as shipped with Red Hat Enterprise Linux 6, and 7 as they did not use CSRF tokens in members pages.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | mailman | Not affected | ||
| Red Hat Enterprise Linux 7 | mailman | Not affected | ||
| Red Hat Enterprise Linux 8 | mailman | Fixed | RHSA-2021:4826 | 23.11.2021 |
| Red Hat Enterprise Linux 8.1 Extended Update Support | mailman | Fixed | RHSA-2021:4838 | 24.11.2021 |
| Red Hat Enterprise Linux 8.2 Extended Update Support | mailman | Fixed | RHSA-2021:4837 | 24.11.2021 |
| Red Hat Enterprise Linux 8.4 Extended Update Support | mailman | Fixed | RHSA-2021:4839 | 24.11.2021 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.3 Medium
CVSS3
Связанные уязвимости
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A cer ...
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
EPSS
4.3 Medium
CVSS3