Is CVE-2017-5594 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2017-5594 being exploited in the wild.

How severe is CVE-2017-5594?

High severity, with a CVSS score of 7.5, published 25 January 2017.

Which products and versions are affected?

pagekit/pagekit (Packagist) ECOSYSTEM:introduced=0,fixed=1.0.11; Pagekit CMS < 1.0.11.

Is there a fix for CVE-2017-5594?

Yes. pagekit/pagekit (Packagist): upgrade to 1.0.11 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2017-5594 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2017-5594?

Check whether you run pagekit/pagekit (Packagist), Pagekit or Pagekit CMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2017-5594: Pagekit CMS password reset vulnerability in debug toolbar

Q: Is there a fix for CVE-2017-5594?

Yes. pagekit/pagekit (Packagist): upgrade to 1.0.11 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2017-5594 attacked?

It is attacked over the network, in a web application.

Q: Am I affected by CVE-2017-5594?

Check whether you run pagekit/pagekit (Packagist), Pagekit or Pagekit CMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2017-5594 · Severity: high · CVSS 7.5 · Published 2017-01-25

Pagekit CMS, a content management system, contains a vulnerability that allows unauthorized individuals to take over user accounts. When the software's debug mode is active, attackers can intercept password reset tokens intended for legitimate users. This could lead to a complete compromise of the website's administration or user accounts, potentially resulting in data theft or site defacement.

Technologies: pagekit/pagekit (Packagist), Pagekit, Pagekit CMS. Vendors: Packagist, Pagekit.

Quick answers

Is CVE-2017-5594 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2017-5594 being exploited in the wild.
How severe is CVE-2017-5594?: High severity, with a CVSS score of 7.5, published 25 January 2017.
Which products and versions are affected?: pagekit/pagekit (Packagist) ECOSYSTEM:introduced=0,fixed=1.0.11; Pagekit CMS < 1.0.11.
Is there a fix for CVE-2017-5594?: Yes. pagekit/pagekit (Packagist): upgrade to 1.0.11 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2017-5594 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2017-5594?: Check whether you run pagekit/pagekit (Packagist), Pagekit or Pagekit CMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

pagekit/pagekit (Packagist): upgrade to 1.0.11 or later
```
composer require pagekit/pagekit:^1.0.11
```

Technical details

A weak password recovery mechanism (CWE-640) exists in Pagekit CMS before version 1.0.11. When the debug toolbar is enabled, sensitive information including password reset tokens is exposed in the debug logs. A remote attacker can retrieve the debug session ID from the login page and use it to access the debug bar data. By monitoring these logs, an attacker can capture the 'user' and 'key' parameters generated during a legitimate password reset request, allowing them to complete the reset process and take over the account. This vulnerability is mitigated by the requirement that the debug toolbar must be enabled and requires some user interaction (the victim must initiate a password reset).

Affected products

Pagekit Pagekit CMS < 1.0.11

Identifiers

CVE-2017-5594
GHSA-rp89-32rp-qpq2

Timeline

2017-01-21: disclosed: Initial discovery and exploit publication by SecureLayer7
2017-01-25: advisory: NVD publication date
2017-01-25: patched: Pagekit version 1.0.11 released to address the issue

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.