SB2022053136 - SUSE update for mailman
Published: May 31, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 secuirty vulnerabilities.
1) Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (CVE-ID: CVE-2021-42096)
The vulnerability allows a remote attacker to brute-force the administrative password.
The vulnerability exists due to a certain csrf_token value is derived from the admin password. A remote attacker can conduct a brute-force attack against that password and gain unauthorized access to the application.
2) Cross-site scripting (CVE-ID: CVE-2021-43331)
The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data in Cgi/options.py. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
3) Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (CVE-ID: CVE-2021-43332)
The vulnerability allows a remote user to perform a brute-force attack.
The vulnerability exists due to the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. A remote user with moderator privileges can perform a brute-force attack against the token and obtain administrator's password.
4) Cross-site request forgery (CVE-ID: CVE-2021-44227)
The vulnerability allows a remote attacker to perform cross-site request forgery attacks.
The vulnerability exists due to insufficient validation of the HTTP request origin. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website, such as get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
Remediation
Install update from vendor's website.