A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.

ikiwiki reports :

The ikiwiki maintainers discovered further flaws similar to CVE-2016-9646 in the passwordauth plugin's use of CGI::FormBuilder, with a more serious impact :

An attacker who can log in to a site with a password can log in as a different and potentially more privileged user.

An attacker who can create a new account can set arbitrary fields in the user database for that account

Several vulnerabilities have been found in ikiwiki, a wiki compiler :

CVE-2016-9646

Commit metadata forgery

CVE-2016-10026

Authorization bypass when reverting changes

CVE-2017-0356

Authentication bypass via repeated parameters

For Debian 7 'Wheezy', these problems have been fixed in version 3.20120629.2+deb7u2.

We recommend that you upgrade your ikiwiki packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to the latest stable version. See https://ikiwiki.info/news/ for the list of changes.

Security fix for CVE-2016-10026, CVE-2016-9646, CVE-2017-0356.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities have been found in the Ikiwiki wiki compiler :

  - CVE-2016-9646     Commit metadata forgery via CGI::FormBuilder     context-dependent APIs

  - CVE-2016-10026     Editing restriction bypass for git revert

  - CVE-2017-0356     Authentication bypass via repeated parameters

Additional details on these vulnerabilities can be found at https://ikiwiki.info/security/

ID	Name	Product	Family	Severity
97546	FreeBSD : ikiwiki -- authentication bypass vulnerability (7b35a77a-0151-11e7-ae1b-002590263bf5)	Nessus	FreeBSD Local Security Checks	critical
96911	Debian DLA-812-1 : ikiwiki security update	Nessus	Debian Local Security Checks	critical
96895	Fedora 24 : ikiwiki (2017-8873ebdb43)	Nessus	Fedora Local Security Checks	critical
96848	Fedora 25 : ikiwiki (2017-c756d37779)	Nessus	Fedora Local Security Checks	critical
96462	Debian DSA-3760-1 : ikiwiki - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2017-0356

critical

Tenable Plugins

critical

critical

critical

critical

critical