Published:2017/06/15  Last Updated:2017/06/15

JVN#56787058
WordPress plugin "WP Job Manager" fails to restrict access permissions

Overview

The WordPress plugin "WP Job Manager" fails to restrict access permissions.

Products Affected

  • WP Job Manager prior to version 1.26.2

Description

The WordPress plugin "WP Job Manager" provided by Automattic Inc. fails to restrict access permissions.

Impact

A remote unauthenticated attacker may upload an image file to the server.

Solution

Update the plugin
Update the plugin according to the information provided by the developer.
According to developer, the update prevents uploading files from unauthenticated users.

Vendor Status

References

JPCERT/CC Addendum

As of June 15th 2017, JPCERT/CC has received several incident reports of website defacements exploiting this issue.

Vulnerability Analysis by JPCERT/CC

CVSS v3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score: 5.3
Attack Vector(AV) Physical (P) Local (L) Adjacent (A) Network (N)
Attack Complexity(AC) High (H) Low (L)
Privileges Required(PR) High (H) Low (L) None (N)
User Interaction(UI) Required (R) None (N)
Scope(S) Unchanged (U) Changed (C)
Confidentiality Impact(C) None (N) Low (L) High (H)
Integrity Impact(I) None (N) Low (L) High (H)
Availability Impact(A) None (N) Low (L) High (H)
CVSS v2 AV:N/AC:L/Au:N/C:N/I:P/A:N
Base Score: 5.0
Access Vector(AV) Local (L) Adjacent Network (A) Network (N)
Access Complexity(AC) High (H) Medium (M) Low (L)
Authentication(Au) Multiple (M) Single (S) None (N)
Confidentiality Impact(C) None (N) Partial (P) Complete (C)
Integrity Impact(I) None (N) Partial (P) Complete (C)
Availability Impact(A) None (N) Partial (P) Complete (C)

Credit

Katsunori Kumagai of Kumasan, LLC. reported this issue to IPA under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE
JVN iPedia JVNDB-2017-000139