CVE-2013-5350

The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://jvn.jp/en/jp/JVN69986880/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000009
http://secunia.com/advisories/54043	Vendor Advisory
http://secunia.com/secunia_research/2014-1/	Vendor Advisory
https://www.openpne.jp/archives/12293/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:tejimaya:openpne:3.6.13:::::::*
	cpe:2.3:a:tejimaya:openpne:3.8.9:::::::*

History

No history.

Information

Published : 2014-01-24 15:08

Updated : 2024-02-28 12:20

NVD link : CVE-2013-5350

Mitre link : CVE-2013-5350

CVE.ORG link : CVE-2013-5350

JSON object : View

Products Affected

tejimaya

openpne

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2013-5350", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-01-24T15:08:00.653", "references": [{"url": "http://jvn.jp/en/jp/JVN69986880/index.html", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000009", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://secunia.com/advisories/54043", "tags": ["Vendor Advisory"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://secunia.com/secunia_research/2014-1/", "tags": ["Vendor Advisory"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "https://www.openpne.jp/archives/12293/", "tags": ["Vendor Advisory"], "source": "PSIRT-CNA@flexerasoftware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The \"Remember me\" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object."}, {"lang": "es", "value": "La funcionalidad \"Remember me\" en la funci\u00f3n opSecurityUser::getRememberLoginCookie en lib/user/opSecurityUser.class.php en OpenPNE 3.6.13 anteriores a 3.6.13.1 y 3.8.9 anteriores a 3.8.9.1 no valida correctamente los datos de login en las cabeceras HTTP Cookie, lo cual permite a atacantes remotos efectuar ataques de inyecci\u00f3n de objetos PHP, y ejecutar c\u00f3digo PHP arbitrario, a trav\u00e9s de un objeto serializado manipulado."}], "lastModified": "2014-01-24T22:00:34.090", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tejimaya:openpne:3.6.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47631DE1-EF45-4251-82A8-0C616A7DFB71"}, {"criteria": "cpe:2.3:a:tejimaya:openpne:3.8.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69E048BB-7CCE-435D-BA5C-228ABB1BC48D"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"}