cvelistv5 - cve-2024-47059

cve-2024-47059

Vulnerability from cvelistv5

Published

2024-09-18 21:19

Modified

2024-09-25 20:46

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak. However when an incorrect username is provided alongside with a weak password, the application responds with ’Invalid credentials’ notification. This difference could be used to perform username enumeration.

References

▼	URL	Tags
	security@mautic.org	https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv

Impacted products

Vendor

Product

Version

▼

Mautic

Version: >= 5.1.0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mautic:mautic:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mautic",
            "vendor": "mautic",
            "versions": [
              {
                "lessThan": "5.1.1",
                "status": "affected",
                "version": "5.1.0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47059",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-25T20:45:37.083409Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-25T20:46:12.074Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://packagist.org",
          "defaultStatus": "unaffected",
          "packageName": "mautic/core",
          "product": "Mautic",
          "repo": "https://github.com/mautic/mautic",
          "vendor": "Mautic",
          "versions": [
            {
              "lessThan": "\u003c 5.1.1",
              "status": "affected",
              "version": "\u003e= 5.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Patryk Gruszka"
        },
        {
          "lang": "en",
          "type": "remediation verifier",
          "value": "John Linhart"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Tomasz Kowalczyk"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Rafa\u0142 Kami\u0144ski"
        }
      ],
      "datePublic": "2024-09-18T20:46:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\u003cbr\u003e\u003cbr\u003eHowever when an incorrect username is provided alongside with a weak password, the application responds with \u2019Invalid credentials\u2019 notification.\u003cbr\u003e\u003cbr\u003eThis difference could be used to perform username enumeration."
            }
          ],
          "value": "When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\n\nHowever when an incorrect username is provided alongside with a weak password, the application responds with \u2019Invalid credentials\u2019 notification.\n\nThis difference could be used to perform username enumeration."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-575",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-575 Account Footprinting"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-19T19:29:53.542Z",
        "orgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e",
        "shortName": "Mautic"
      },
      "references": [
        {
          "url": "https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to 5.1.1 or later."
            }
          ],
          "value": "Update to 5.1.1 or later."
        }
      ],
      "source": {
        "advisory": "GHSA-8vff-35qm-qjvv",
        "discovery": "USER"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-08-06T13:09:00.000Z",
          "value": "Issue reported"
        },
        {
          "lang": "en",
          "time": "2024-08-06T13:10:00.000Z",
          "value": "Fix proposed"
        },
        {
          "lang": "en",
          "time": "2023-09-17T12:23:00.000Z",
          "value": "QA passed"
        }
      ],
      "title": "Users enumeration - weak password login",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e",
    "assignerShortName": "Mautic",
    "cveId": "CVE-2024-47059",
    "datePublished": "2024-09-18T21:19:26.951Z",
    "dateReserved": "2024-09-17T13:41:00.585Z",
    "dateUpdated": "2024-09-25T20:46:12.074Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\\n\\nHowever when an incorrect username is provided alongside with a weak password, the application responds with \\u2019Invalid credentials\\u2019 notification.\\n\\nThis difference could be used to perform username enumeration.\"}, {\"lang\": \"es\", \"value\": \"Al iniciar sesi\\u00f3n con el nombre de usuario correcto y una contrase\\u00f1a d\\u00e9bil incorrecta, el usuario recibe una notificaci\\u00f3n que indica que su contrase\\u00f1a es demasiado d\\u00e9bil. Sin embargo, cuando se proporciona un nombre de usuario incorrecto junto con una contrase\\u00f1a d\\u00e9bil, la aplicaci\\u00f3n responde con una notificaci\\u00f3n de \\\"Credenciales no v\\u00e1lidas\\\". Esta diferencia se puede utilizar para realizar la enumeraci\\u00f3n de nombres de usuario.\"}]",
      "id": "CVE-2024-47059",
      "lastModified": "2024-09-20T12:30:17.483",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"security@mautic.org\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 1.4}]}",
      "published": "2024-09-18T22:15:04.650",
      "references": "[{\"url\": \"https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv\", \"source\": \"security@mautic.org\"}]",
      "sourceIdentifier": "security@mautic.org",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": "[{\"source\": \"security@mautic.org\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-200\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-47059\",\"sourceIdentifier\":\"security@mautic.org\",\"published\":\"2024-09-18T22:15:04.650\",\"lastModified\":\"2024-09-20T12:30:17.483\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\\n\\nHowever when an incorrect username is provided alongside with a weak password, the application responds with \u2019Invalid credentials\u2019 notification.\\n\\nThis difference could be used to perform username enumeration.\"},{\"lang\":\"es\",\"value\":\"Al iniciar sesi\u00f3n con el nombre de usuario correcto y una contrase\u00f1a d\u00e9bil incorrecta, el usuario recibe una notificaci\u00f3n que indica que su contrase\u00f1a es demasiado d\u00e9bil. Sin embargo, cuando se proporciona un nombre de usuario incorrecto junto con una contrase\u00f1a d\u00e9bil, la aplicaci\u00f3n responde con una notificaci\u00f3n de \\\"Credenciales no v\u00e1lidas\\\". Esta diferencia se puede utilizar para realizar la enumeraci\u00f3n de nombres de usuario.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@mautic.org\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"security@mautic.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"references\":[{\"url\":\"https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv\",\"source\":\"security@mautic.org\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-47059\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-25T20:45:37.083409Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:mautic:mautic:*:*:*:*:*:*:*:*\"], \"vendor\": \"mautic\", \"product\": \"mautic\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.1.0\", \"lessThan\": \"5.1.1\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-19T15:39:44.235Z\"}}], \"cna\": {\"title\": \"Users enumeration - weak password login\", \"source\": {\"advisory\": \"GHSA-8vff-35qm-qjvv\", \"discovery\": \"USER\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"remediation reviewer\", \"value\": \"Patryk Gruszka\"}, {\"lang\": \"en\", \"type\": \"remediation verifier\", \"value\": \"John Linhart\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Tomasz Kowalczyk\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Rafa\\u0142 Kami\\u0144ski\"}], \"impacts\": [{\"capecId\": \"CAPEC-575\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-575 Account Footprinting\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"repo\": \"https://github.com/mautic/mautic\", \"vendor\": \"Mautic\", \"product\": \"Mautic\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 5.1.0\", \"lessThan\": \"\u003c 5.1.1\", \"versionType\": \"semver\"}], \"packageName\": \"mautic/core\", \"collectionURL\": \"https://packagist.org\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-08-06T13:09:00.000Z\", \"value\": \"Issue reported\"}, {\"lang\": \"en\", \"time\": \"2024-08-06T13:10:00.000Z\", \"value\": \"Fix proposed\"}, {\"lang\": \"en\", \"time\": \"2023-09-17T12:23:00.000Z\", \"value\": \"QA passed\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Update to 5.1.1 or later.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Update to 5.1.1 or later.\", \"base64\": false}]}], \"datePublic\": \"2024-09-18T20:46:00.000Z\", \"references\": [{\"url\": \"https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\\n\\nHowever when an incorrect username is provided alongside with a weak password, the application responds with \\u2019Invalid credentials\\u2019 notification.\\n\\nThis difference could be used to perform username enumeration.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\u003cbr\u003e\u003cbr\u003eHowever when an incorrect username is provided alongside with a weak password, the application responds with \\u2019Invalid credentials\\u2019 notification.\u003cbr\u003e\u003cbr\u003eThis difference could be used to perform username enumeration.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor\"}]}], \"providerMetadata\": {\"orgId\": \"4e531c38-7a33-45d3-98dd-d909c0d8852e\", \"shortName\": \"Mautic\", \"dateUpdated\": \"2024-09-19T19:29:53.542Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-47059\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-09-25T20:46:12.074Z\", \"dateReserved\": \"2024-09-17T13:41:00.585Z\", \"assignerOrgId\": \"4e531c38-7a33-45d3-98dd-d909c0d8852e\", \"datePublished\": \"2024-09-18T21:19:26.951Z\", \"assignerShortName\": \"Mautic\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

cve-2024-47059

Vulnerability from fkie_nvd

Published

2024-09-18 22:15

Modified

2024-09-20 12:30

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

References

▼	URL	Tags
	security@mautic.org	https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\n\nHowever when an incorrect username is provided alongside with a weak password, the application responds with \u2019Invalid credentials\u2019 notification.\n\nThis difference could be used to perform username enumeration."
    },
    {
      "lang": "es",
      "value": "Al iniciar sesi\u00f3n con el nombre de usuario correcto y una contrase\u00f1a d\u00e9bil incorrecta, el usuario recibe una notificaci\u00f3n que indica que su contrase\u00f1a es demasiado d\u00e9bil. Sin embargo, cuando se proporciona un nombre de usuario incorrecto junto con una contrase\u00f1a d\u00e9bil, la aplicaci\u00f3n responde con una notificaci\u00f3n de \"Credenciales no v\u00e1lidas\". Esta diferencia se puede utilizar para realizar la enumeraci\u00f3n de nombres de usuario."
    }
  ],
  "id": "CVE-2024-47059",
  "lastModified": "2024-09-20T12:30:17.483",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "security@mautic.org",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-09-18T22:15:04.650",
  "references": [
    {
      "source": "security@mautic.org",
      "url": "https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv"
    }
  ],
  "sourceIdentifier": "security@mautic.org",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "security@mautic.org",
      "type": "Secondary"
    }
  ]
}

ghsa-8vff-35qm-qjvv

Vulnerability from github

Published

2024-09-18 22:10

Modified

2024-09-19 21:48

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Summary

Mautic allows users enumeration due to weak password login

Details

Summary

When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.

However when an incorrect username is provided along side with weak password, the application responds with ’Invalid credentials’ notification.

This difference could be used to perform username enumeration.

Patches

Update to 5.1.1 or later.

If you have any questions or comments about this advisory:

Email us at security@mautic.org

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "mautic/core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.1.0"
            },
            {
              "fixed": "5.1.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2024-47059"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200",
      "CWE-204"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-09-18T22:10:05Z",
    "nvd_published_at": "2024-09-18T22:15:04Z",
    "severity": "MODERATE"
  },
  "details": "### Summary\n\nWhen logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\n\nHowever when an incorrect username is provided along side with weak password, the application responds with \u2019Invalid credentials\u2019 notification.\n\nThis difference could be used to perform username enumeration.\n\n### Patches\n\nUpdate to 5.1.1 or later.\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)",
  "id": "GHSA-8vff-35qm-qjvv",
  "modified": "2024-09-19T21:48:35Z",
  "published": "2024-09-18T22:10:05Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47059"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/mautic/mautic"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Mautic allows users enumeration due to weak password login"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

cve-2024-47059

Vulnerability from cvelistv5

cve-2024-47059

Vulnerability from fkie_nvd

ghsa-8vff-35qm-qjvv

Vulnerability from github

Summary

Patches

Tags

Sightings

Nomenclature