CVE-2012-4382

Impact

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.openwall.com/lists/oss-security/2012/08/31/10
• http://www.openwall.com/lists/oss-security/2012/08/31/6
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330
• https://lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.html
• https://phabricator.wikimedia.org/T41823
• http://www.openwall.com/lists/oss-security/2012/08/31/10
• http://www.openwall.com/lists/oss-security/2012/08/31/6
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330
• https://lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.html
• https://phabricator.wikimedia.org/T41823