Sitecore CMS Staging Service 'api.asmx' Authentication Bypass Vulnerability

Bugtraq ID:	37388
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 17 2009 12:00AM
Updated:	Dec 18 2009 10:53PM
Credit:	Lukas Weichselbaum from SEC Consult
Vulnerable:	Sitecore Sitecore CMS 5.4 rev 080625 Sitecore Sitecore CMS 5.3.2 rev. 090212 Sitecore Sitecore CMS 5.3.2 rev. 081002 Sitecore Sitecore CMS 5.3.1 rev. 071114
Not Vulnerable:	Sitecore Sitecore CMS 5.4 rev 091111

Sitecore CMS Staging Service 'api.asmx' Authentication Bypass Vulnerability

Sitecore CMS is prone to an authentication-bypass vulnerability.

Attackers can exploit this issue to gain administrative access to the affected application.

Versions prior to Sitecore CMS 5.4.0 rev 091111 are vulnerable.

Sitecore CMS Staging Service 'api.asmx' Authentication Bypass Vulnerability

Attackers can exploit this issue via a browser.

The following example request is available:

• /data/vulnerabilities/exploits/37388.txt

Sitecore CMS Staging Service 'api.asmx' Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Sitecore CMS Staging Service 'api.asmx' Authentication Bypass Vulnerability

References:

• Sitecore CMS Homepage (Sitecore)
  
• SEC Consult SA-20091217-0 :: Authentication bypass and file manipulation in Sit (Lukas Weichselbaum )