Vulnerability CVE-2018-1000773

Vulnerability Name:

CVE-2018-1000773 (CCN-150603)

Assigned:

2018-08-20

Published:

2018-08-20

Updated:

2018-11-14

Summary:

WordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code execution due to an incomplete fix for CVE-2017-1000600. This attack appears to be exploitable via thumbnail upload by an authenticated user and may require additional plugins in order to be exploited however this has not been confirmed at this time.

CVSS v3 Severity:

8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

6.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
5.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-20

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2018-1000773

Source: BID
Type: Third Party Advisory, VDB Entry
105306

Source: CCN
Type: BID-105306
WordPress CVE-2018-1000773 Incomplete Fix Arbitrary File Upload Vulnerability

Source: XF
Type: UNKNOWN
wp-cve20181000773-code-exec(150603)

Source: CCN
Type: WordPress Web site
WordPress

Source: CCN
Type: The Register Web site
So phar, so FUD: PHP flaw puts WordPress sites at risk of hacks

Source: MISC
Type: Third Party Advisory
https://www.theregister.co.uk/2018/08/20/php_unserialisation_wordpress_vuln/

Source: MISC
Type: Third Party Advisory
https://youtu.be/GePBmsNJw6Y?t=1763

Vulnerable Configuration:

Configuration 1:

cpe:/a:wordpress:wordpress:*:*:*:*:*:*:*:* (Version <= 4.9.8)

Configuration CCN 1:

cpe:/a:wordpress:wordpress:4.9.8:-:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:com.ubuntu.disco:def:201810007730000000	V	CVE-2018-1000773 on Ubuntu 19.04 (disco) - low.	2018-09-06
oval:com.ubuntu.bionic:def:20181000773000	V	CVE-2018-1000773 on Ubuntu 18.04 LTS (bionic) - low.	2018-09-06
oval:com.ubuntu.cosmic:def:201810007730000000	V	CVE-2018-1000773 on Ubuntu 18.10 (cosmic) - low.	2018-09-06
oval:com.ubuntu.cosmic:def:20181000773000	V	CVE-2018-1000773 on Ubuntu 18.10 (cosmic) - low.	2018-09-06
oval:com.ubuntu.bionic:def:201810007730000000	V	CVE-2018-1000773 on Ubuntu 18.04 LTS (bionic) - low.	2018-09-06
oval:com.ubuntu.trusty:def:20181000773000	V	CVE-2018-1000773 on Ubuntu 14.04 LTS (trusty) - low.	2018-09-06
oval:com.ubuntu.xenial:def:201810007730000000	V	CVE-2018-1000773 on Ubuntu 16.04 LTS (xenial) - low.	2018-09-06
oval:com.ubuntu.xenial:def:20181000773000	V	CVE-2018-1000773 on Ubuntu 16.04 LTS (xenial) - low.	2018-09-06

BACK