CVE-2012-4381 Hardcoded credentials in MediaWiki
MediaWiki stored passwords in cleartext, allowing attackers to obtain credentials via brute-force or use old passwords for non-existing accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-4381?
CVE-2012-4381 is a high-severity vulnerability in Mediawiki Mediawiki, published on 8 Feb 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1) which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, (2) when an authentication plugin returns a false in the strict function, could allow remote attackers to use old passwords for non-existing accounts in an external authentication system via unspecified vectors.
Weakness: CWE-798
Which versions are affected by CVE-2012-4381?
It affects 1 product.
Products include Mediawiki Mediawiki.
How do I fix CVE-2012-4381?
Upgrade to a fixed version.
Is CVE-2012-4381 being exploited?
There is no known exploitation of CVE-2012-4381 in the wild and no public exploit code.
Other vulnerabilities in Mediawiki Mediawiki
Sources
Also known as DEBIAN-CVE-2012-4381, GHSA-794f-724h-wf37.