Vulnerabilities > CVE-2017-0897 - Insufficient Entropy vulnerability in Expressionengine

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

expressionengine

CWE-331

NVD

Published: 2017-06-22

Updated: 2019-10-09

Summary

ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to remote code execution.

Vulnerable Configurations

Part	Description	Count
Application	Expressionengine Expressionengine Expressionengine 2.2.1 Expressionengine Expressionengine 3.4.7 Expressionengine Expressionengine 3.5.4 Expressionengine Expressionengine 2.8.1 Expressionengine Expressionengine 2.9.1 Expressionengine Expressionengine 3.3.1 Expressionengine Expressionengine 3.3.2 Expressionengine Expressionengine 2.10.3 Expressionengine Expressionengine 2.10.1 Expressionengine Expressionengine 3.0.2 Expressionengine Expressionengine 3.4.2 Expressionengine Expressionengine 2.11.0 Expressionengine Expressionengine 2.6.1 Expressionengine Expressionengine 2.10.0 Expressionengine Expressionengine 3.5.0 Expressionengine Expressionengine 2.1.4 Expressionengine Expressionengine 2.5.3 Expressionengine Expressionengine 3.2.1 Expressionengine Expressionengine 3.0.6 Expressionengine Expressionengine 2.2.2 Expressionengine Expressionengine 2.9.3 Expressionengine Expressionengine 2.1.5 Expressionengine Expressionengine 2.5.5 Expressionengine Expressionengine 2.5.2 Expressionengine Expressionengine 2.7.2 Expressionengine Expressionengine 2.3.0 Expressionengine Expressionengine 2.1.1 Expressionengine Expressionengine 2.8.0 Expressionengine Expressionengine 3.2.0 Expressionengine Expressionengine 2.3.1 Expressionengine Expressionengine 3.3.4 Expressionengine Expressionengine 2.9.0 Expressionengine Expressionengine 2.0.2 Expressionengine Expressionengine 2.7.1 Expressionengine Expressionengine 3.1.2 Expressionengine Expressionengine 2.2.0 Expressionengine Expressionengine 2.11.3 Expressionengine Expressionengine 2.11.4 Expressionengine Expressionengine 3.4.4 Expressionengine Expressionengine 2.4.0 Expressionengine Expressionengine 3.1.0 Expressionengine Expressionengine 3.0.4 Expressionengine Expressionengine 3.4.5 Expressionengine Expressionengine 2.0.1 Expressionengine Expressionengine 2.5.4 Expressionengine Expressionengine 3.0.3 Expressionengine Expressionengine 3.4.0 Expressionengine Expressionengine 3.0.0 Expressionengine Expressionengine 2.11.7 Expressionengine Expressionengine 3.5.3 Expressionengine Expressionengine 2.0.0 Expressionengine Expressionengine 3.0.1 Expressionengine Expressionengine 2.11.5 Expressionengine Expressionengine 2.1.2 Expressionengine Expressionengine 2.11.2 Expressionengine Expressionengine 2.5.1 Expressionengine Expressionengine 2.11.6 Expressionengine Expressionengine 3.0.5 Expressionengine Expressionengine 2.7.0 Expressionengine Expressionengine 3.4.3 Expressionengine Expressionengine 3.4.6 Expressionengine Expressionengine 3.1.1 Expressionengine Expressionengine 3.5.2 Expressionengine Expressionengine 3.4.1 Expressionengine Expressionengine 3.3.3 Expressionengine Expressionengine 2.11.1 Expressionengine Expressionengine 2.9.2 Expressionengine Expressionengine 3.1.3 Expressionengine Expressionengine 2.1.0 Expressionengine Expressionengine 2.6.0 Expressionengine Expressionengine 3.3.0 Expressionengine Expressionengine 2.10.2 Expressionengine Expressionengine 2.7.3 Expressionengine Expressionengine 2.5.0 Expressionengine Expressionengine 2.1.3 Expressionengine Expressionengine 3.5.1 Expressionengine Expressionengine 3.1.4	77

Common Weakness Enumeration (CWE)

CWE-331 - Insufficient Entropy

Common Attack Pattern Enumeration and Classification (CAPEC)

Session Credential Falsification through Prediction
This attack targets predictable session ID in order to gain privileges. The attacker can predict the session ID used during a transaction to perform spoofing and session hijacking.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References