SilverStripe 'MemberLoginForm.php' Information Disclosure Vulnerability

Bugtraq ID:	61578
Class:	Input Validation Error
CVE:	CVE-2013-2653
Remote:	Yes
Local:	No
Published:	Aug 01 2013 12:00AM
Updated:	Aug 01 2013 12:00AM
Credit:	Fara Rustein from Deloitte Argentina
Vulnerable:	SilverStripe SilverStripe 3.0.3
Not Vulnerable:

SilverStripe 'MemberLoginForm.php' Information Disclosure Vulnerability

SilverStripe is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

SilverStripe 3.0.3 is vulnerable; other versions may also be affected.

SilverStripe 'MemberLoginForm.php' Information Disclosure Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

The following example URI is available:

http://<X.X.X.X:Port>/Security/LoginForm?AuthenticationMethod=MemberAuthenticator&Email=<email>&Password=<password>&BackURL=%2Fadmin%2Fpages&action_dologin=Log+in

SilverStripe 'MemberLoginForm.php' Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SilverStripe 'MemberLoginForm.php' Information Disclosure Vulnerability

References:

• API Restrict MemberLoginForm to POST requests for increased security (silverstripe-framework)
  
• SilverStripe Homepage (SilverStripe)
  
• SilverStripe(R) Information Exposure Through Query Strings in GET Request (CWE-5 (Rustein, Fara Denise)