Vulnerability-Lookup

CNVD-2021-70085

Vulnerability from cnvd - Published: 2021-09-11

Title

Mautic安全特征问题特征问题漏洞

Description

Mautic是一款开源的营销自动化软件。该软件能够监控管理网站、发送电子邮件并管理客户资源。 Mautic 3.3.4之前版本和4.0.0之前版本存在安全特征问题漏洞，该漏洞源于软件中的mt_rand函数，该函数用于生成会话令牌，但其伪随机性的特性使得函数在加密方面存在缺陷，攻击者可以利用该漏洞的函数加密不安全特性，为不受其控制的账户枚举会话令牌。

Severity

低

Patch Name

Mautic安全特征问题特征问题漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-27913

Impacted products

Name
['Mautic Mautic <3.3.4', 'Mautic Mautic <4.0.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-27913"
    }
  },
  "description": "Mautic\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u8425\u9500\u81ea\u52a8\u5316\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u80fd\u591f\u76d1\u63a7\u7ba1\u7406\u7f51\u7ad9\u3001\u53d1\u9001\u7535\u5b50\u90ae\u4ef6\u5e76\u7ba1\u7406\u5ba2\u6237\u8d44\u6e90\u3002\n\nMautic 3.3.4\u4e4b\u524d\u7248\u672c\u548c4.0.0\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u7279\u5f81\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f6f\u4ef6\u4e2d\u7684mt_rand\u51fd\u6570\uff0c\u8be5\u51fd\u6570\u7528\u4e8e\u751f\u6210\u4f1a\u8bdd\u4ee4\u724c\uff0c\u4f46\u5176\u4f2a\u968f\u673a\u6027\u7684\u7279\u6027\u4f7f\u5f97\u51fd\u6570\u5728\u52a0\u5bc6\u65b9\u9762\u5b58\u5728\u7f3a\u9677\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u7684\u51fd\u6570\u52a0\u5bc6\u4e0d\u5b89\u5168\u7279\u6027\uff0c\u4e3a\u4e0d\u53d7\u5176\u63a7\u5236\u7684\u8d26\u6237\u679a\u4e3e\u4f1a\u8bdd\u4ee4\u724c\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-70085",
  "openTime": "2021-09-11",
  "patchDescription": "Mautic\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u8425\u9500\u81ea\u52a8\u5316\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u80fd\u591f\u76d1\u63a7\u7ba1\u7406\u7f51\u7ad9\u3001\u53d1\u9001\u7535\u5b50\u90ae\u4ef6\u5e76\u7ba1\u7406\u5ba2\u6237\u8d44\u6e90\u3002\r\n\r\nMautic 3.3.4\u4e4b\u524d\u7248\u672c\u548c4.0.0\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u7279\u5f81\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f6f\u4ef6\u4e2d\u7684mt_rand\u51fd\u6570\uff0c\u8be5\u51fd\u6570\u7528\u4e8e\u751f\u6210\u4f1a\u8bdd\u4ee4\u724c\uff0c\u4f46\u5176\u4f2a\u968f\u673a\u6027\u7684\u7279\u6027\u4f7f\u5f97\u51fd\u6570\u5728\u52a0\u5bc6\u65b9\u9762\u5b58\u5728\u7f3a\u9677\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u7684\u51fd\u6570\u52a0\u5bc6\u4e0d\u5b89\u5168\u7279\u6027\uff0c\u4e3a\u4e0d\u53d7\u5176\u63a7\u5236\u7684\u8d26\u6237\u679a\u4e3e\u4f1a\u8bdd\u4ee4\u724c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Mautic\u5b89\u5168\u7279\u5f81\u95ee\u9898\u7279\u5f81\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Mautic Mautic \u003c3.3.4",
      "Mautic Mautic \u003c4.0.0"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-27913",
  "serverity": "\u4f4e",
  "submitTime": "2021-09-01",
  "title": "Mautic\u5b89\u5168\u7279\u5f81\u95ee\u9898\u7279\u5f81\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2021-27913 (GCVE-0-2021-27913)

Vulnerability from cvelistv5 – Published: 2021-08-30 15:55 – Updated: 2024-09-16 18:08

Title

Use of a Broken or Risky Cryptographic Algorithm

Summary

The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control This issue affects: Mautic Mautic versions prior to 3.3.4; versions prior to 4.0.0.

Severity

3.5 (Low)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CWE

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Assigner

Mautic mitre root

References

1 reference

URL	Tags
https://github.com/mautic/mautic/security/advisor…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Mautic	Mautic	Affected: unspecified , < 3.3.4 (custom) Affected: unspecified , < 4.0.0 (custom)

Date Public

2021-08-30 00:00

Credits

Reported by Michael Rowley https://github.com/michaellrowley, Fixed by Mohit Aghera https://github.com/mohit-rocks

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T21:33:17.210Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Mautic",
          "vendor": "Mautic",
          "versions": [
            {
              "lessThan": "3.3.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "4.0.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Reported by Michael Rowley https://github.com/michaellrowley, Fixed by Mohit Aghera https://github.com/mohit-rocks"
        }
      ],
      "datePublic": "2021-08-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control This issue affects: Mautic Mautic versions prior to 3.3.4; versions prior to 4.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-327",
              "description": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-30T15:55:21.000Z",
        "orgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e",
        "shortName": "Mautic"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3"
        }
      ],
      "source": {
        "defect": [
          "MST-18"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Use of a Broken or Risky Cryptographic Algorithm",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mautic.org",
          "DATE_PUBLIC": "2021-08-30T14:06:00.000Z",
          "ID": "CVE-2021-27913",
          "STATE": "PUBLIC",
          "TITLE": "Use of a Broken or Risky Cryptographic Algorithm"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Mautic",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "3.3.4"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "4.0.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mautic"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Reported by Michael Rowley https://github.com/michaellrowley, Fixed by Mohit Aghera https://github.com/mohit-rocks"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control This issue affects: Mautic Mautic versions prior to 3.3.4; versions prior to 4.0.0."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3",
              "refsource": "MISC",
              "url": "https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3"
            }
          ]
        },
        "source": {
          "defect": [
            "MST-18"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e",
    "assignerShortName": "Mautic",
    "cveId": "CVE-2021-27913",
    "datePublished": "2021-08-30T15:55:21.646Z",
    "dateReserved": "2021-03-02T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:08:08.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2021-70085

CVE-2021-27913 (GCVE-0-2021-27913)

Tags

Sightings

Nomenclature

Related by attack behaviour