| Vulnerability Name: | CVE-2016-8869 (CCN-118420) | ||||||||||||
| Assigned: | 2016-10-25 | ||||||||||||
| Published: | 2016-10-25 | ||||||||||||
| Updated: | 2016-11-07 | ||||||||||||
| Summary: | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site. | ||||||||||||
| CVSS v3 Severity: | 9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) 9.1 Critical (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C)
6.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:F/RL:O/RC:C)
| ||||||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||||||
| Vulnerability Type: | CWE-20 | ||||||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2016-8869 Source: MISC Type: Third Party Advisory http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc Source: BID Type: Third Party Advisory, VDB Entry 93883 Source: CCN Type: BID-93883 Joomla! Core CVE-2016-8869 Remote Privilege Escalation Vulnerability Source: SECTRACK Type: Third Party Advisory, VDB Entry 1037108 Source: MISC Type: Exploit, Technical Description, Third Party Advisory https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html Source: CCN Type: Joomla! Developer Web site Core - Elevated Privileges Source: CONFIRM Type: Vendor Advisory https://developer.joomla.org/security-centre/660-20161002-core-elevated-privileges.html Source: XF Type: UNKNOWN joomla-cve20168869-priv-esc(118420) Source: CONFIRM Type: Patch https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcf Source: MISC Type: Exploit, Technical Description, Third Party Advisory https://medium.com/@showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [10-27-2016] Source: EXPLOIT-DB Type: Exploit, Third Party Advisory 40637 Source: CCN Type: Joomla! Web site Joomla! The CMS Trusted By Millions for their Websites Source: CCN Type: WhiteSource Vulnerability Database CVE-2016-8869 | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||
| BACK | |||||||||||||