CVE-2024-11028

{"id": "CVE-2024-11028", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-11-13T10:15:04.237", "references": [{"url": "https://plugins.trac.wordpress.org/changeset/3184657/multimanager-wp", "tags": ["Product"], "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/changeset/3184678/multimanager-wp", "tags": ["Product"], "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/changeset/3184826/multimanager-wp", "tags": ["Product"], "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/de8e7adc-3777-4fb1-a708-68da950e3d4f?source=cve", "tags": ["Third Party Advisory"], "source": "security@wordfence.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-288"}]}], "descriptions": [{"lang": "en", "value": "The MultiManager WP \u2013 Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersonation feature inappropriately determining the current user via user-supplied input. This makes it possible for unauthenticated attackers to generate an impersonation link that will allow them to log in as any existing user, such as an administrator. NOTE: The user impersonation feature was disabled in version 1.1.0 and re-enabled with a patch in version 1.1.2."}, {"lang": "es", "value": "El complemento MultiManager WP \u2013 Manage All Your WordPress Sites Easily para WordPress es vulnerable a la omisi\u00f3n de autenticaci\u00f3n en todas las versiones hasta la 1.0.5 incluida. Esto se debe a que la funci\u00f3n de suplantaci\u00f3n de usuario determina de manera inapropiada el usuario actual a trav\u00e9s de la entrada proporcionada por el usuario. Esto hace posible que los atacantes no autenticados generen un enlace de suplantaci\u00f3n que les permitir\u00e1 iniciar sesi\u00f3n como cualquier usuario existente, como un administrador. NOTA: La funci\u00f3n de suplantaci\u00f3n de usuario se deshabilit\u00f3 en la versi\u00f3n 1.1.0 y se volvi\u00f3 a habilitar con un parche en la versi\u00f3n 1.1.2."}], "lastModified": "2024-11-19T15:38:19.023", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:icdsoft:multimanager_wp:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "BC69E7B4-166A-4804-874E-DC59E5FBA8B7", "versionEndExcluding": "1.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@wordfence.com"}