cnvd - cnvd-2021-70085

CNVD-2021-70085

Vulnerability from cnvd - Published: 2021-09-11

Title

Mautic安全特征问题特征问题漏洞

Description

Mautic是一款开源的营销自动化软件。该软件能够监控管理网站、发送电子邮件并管理客户资源。 Mautic 3.3.4之前版本和4.0.0之前版本存在安全特征问题漏洞，该漏洞源于软件中的mt_rand函数，该函数用于生成会话令牌，但其伪随机性的特性使得函数在加密方面存在缺陷，攻击者可以利用该漏洞的函数加密不安全特性，为不受其控制的账户枚举会话令牌。

Severity

低

Patch Name

Mautic安全特征问题特征问题漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-27913

Impacted products

Name
['Mautic Mautic <3.3.4', 'Mautic Mautic <4.0.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-27913"
    }
  },
  "description": "Mautic\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u8425\u9500\u81ea\u52a8\u5316\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u80fd\u591f\u76d1\u63a7\u7ba1\u7406\u7f51\u7ad9\u3001\u53d1\u9001\u7535\u5b50\u90ae\u4ef6\u5e76\u7ba1\u7406\u5ba2\u6237\u8d44\u6e90\u3002\n\nMautic 3.3.4\u4e4b\u524d\u7248\u672c\u548c4.0.0\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u7279\u5f81\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f6f\u4ef6\u4e2d\u7684mt_rand\u51fd\u6570\uff0c\u8be5\u51fd\u6570\u7528\u4e8e\u751f\u6210\u4f1a\u8bdd\u4ee4\u724c\uff0c\u4f46\u5176\u4f2a\u968f\u673a\u6027\u7684\u7279\u6027\u4f7f\u5f97\u51fd\u6570\u5728\u52a0\u5bc6\u65b9\u9762\u5b58\u5728\u7f3a\u9677\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u7684\u51fd\u6570\u52a0\u5bc6\u4e0d\u5b89\u5168\u7279\u6027\uff0c\u4e3a\u4e0d\u53d7\u5176\u63a7\u5236\u7684\u8d26\u6237\u679a\u4e3e\u4f1a\u8bdd\u4ee4\u724c\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-70085",
  "openTime": "2021-09-11",
  "patchDescription": "Mautic\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u8425\u9500\u81ea\u52a8\u5316\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u80fd\u591f\u76d1\u63a7\u7ba1\u7406\u7f51\u7ad9\u3001\u53d1\u9001\u7535\u5b50\u90ae\u4ef6\u5e76\u7ba1\u7406\u5ba2\u6237\u8d44\u6e90\u3002\r\n\r\nMautic 3.3.4\u4e4b\u524d\u7248\u672c\u548c4.0.0\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u7279\u5f81\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f6f\u4ef6\u4e2d\u7684mt_rand\u51fd\u6570\uff0c\u8be5\u51fd\u6570\u7528\u4e8e\u751f\u6210\u4f1a\u8bdd\u4ee4\u724c\uff0c\u4f46\u5176\u4f2a\u968f\u673a\u6027\u7684\u7279\u6027\u4f7f\u5f97\u51fd\u6570\u5728\u52a0\u5bc6\u65b9\u9762\u5b58\u5728\u7f3a\u9677\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u7684\u51fd\u6570\u52a0\u5bc6\u4e0d\u5b89\u5168\u7279\u6027\uff0c\u4e3a\u4e0d\u53d7\u5176\u63a7\u5236\u7684\u8d26\u6237\u679a\u4e3e\u4f1a\u8bdd\u4ee4\u724c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Mautic\u5b89\u5168\u7279\u5f81\u95ee\u9898\u7279\u5f81\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Mautic Mautic \u003c3.3.4",
      "Mautic Mautic \u003c4.0.0"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-27913",
  "serverity": "\u4f4e",
  "submitTime": "2021-09-01",
  "title": "Mautic\u5b89\u5168\u7279\u5f81\u95ee\u9898\u7279\u5f81\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2021-27913 (GCVE-0-2021-27913)

Vulnerability from cvelistv5 – Published: 2021-08-30 15:55 – Updated: 2024-09-16 18:08

Title

Use of a Broken or Risky Cryptographic Algorithm

Summary

The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control This issue affects: Mautic Mautic versions prior to 3.3.4; versions prior to 4.0.0.

Severity ?

3.5 (Low)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CWE

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Assigner

Mautic

References

URL

Tags

https://github.com/mautic/mautic/security/advisor…

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Mautic	Mautic	Affected: unspecified , < 3.3.4 (custom) Affected: unspecified , < 4.0.0 (custom)

Credits

Reported by Michael Rowley https://github.com/michaellrowley, Fixed by Mohit Aghera https://github.com/mohit-rocks

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T21:33:17.210Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Mautic",
          "vendor": "Mautic",
          "versions": [
            {
              "lessThan": "3.3.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "4.0.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Reported by Michael Rowley https://github.com/michaellrowley, Fixed by Mohit Aghera https://github.com/mohit-rocks"
        }
      ],
      "datePublic": "2021-08-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control This issue affects: Mautic Mautic versions prior to 3.3.4; versions prior to 4.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-327",
              "description": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-30T15:55:21",
        "orgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e",
        "shortName": "Mautic"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3"
        }
      ],
      "source": {
        "defect": [
          "MST-18"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Use of a Broken or Risky Cryptographic Algorithm",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mautic.org",
          "DATE_PUBLIC": "2021-08-30T14:06:00.000Z",
          "ID": "CVE-2021-27913",
          "STATE": "PUBLIC",
          "TITLE": "Use of a Broken or Risky Cryptographic Algorithm"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Mautic",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "3.3.4"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "4.0.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mautic"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Reported by Michael Rowley https://github.com/michaellrowley, Fixed by Mohit Aghera https://github.com/mohit-rocks"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control This issue affects: Mautic Mautic versions prior to 3.3.4; versions prior to 4.0.0."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3",
              "refsource": "MISC",
              "url": "https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3"
            }
          ]
        },
        "source": {
          "defect": [
            "MST-18"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e",
    "assignerShortName": "Mautic",
    "cveId": "CVE-2021-27913",
    "datePublished": "2021-08-30T15:55:21.646676Z",
    "dateReserved": "2021-03-02T00:00:00",
    "dateUpdated": "2024-09-16T18:08:08.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2021-70085

CVE-2021-27913 (GCVE-0-2021-27913)

Tags

Sightings

Nomenclature