CVE-2015-7225

{"id": "CVE-2015-7225", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2017-09-06T21:29:00.957", "references": [{"url": "http://www.openwall.com/lists/oss-security/2015/06/20/4", "tags": ["Mailing List", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2015/09/17/2", "tags": ["Mailing List", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/76789", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798466", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/tinfoil/devise-two-factor/blob/master/UPGRADING.md", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/tinfoil/devise-two-factor/issues/45#issuecomment-139335608", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-254"}]}], "descriptions": [{"lang": "en", "value": "Tinfoil Devise-two-factor before 2.0.0 does not strictly follow section 5.2 of RFC 6238 and does not \"burn\" a successfully validated one-time password (aka OTP), which allows remote or physically proximate attackers with a target user's login credentials to log in as said user by obtaining the OTP through performing a man-in-the-middle attack between the provider and verifier, or shoulder surfing, and replaying the OTP in the current time-step."}, {"lang": "es", "value": "Tinfoil Devise-two-factor, en versiones anteriores a la 2.0.0, no sigue de manera estricta la secci\u00f3n 5.2 de la norma RFC 6238 y no \"consume\" una contrase\u00f1a de un solo uso (tambi\u00e9n llamada OTP) correctamente validada. Esto permite que atacantes remotos o que se encuentren f\u00edsicamente cerca inicien sesi\u00f3n como un usuario utilizando sus credenciales de acceso. Esto se llevar\u00eda a cabo realizando un ataque Man-in-the-Middle (MitM) entre el proveedor y el verificador u observando f\u00edsicamente (lo que se conoce como shoulder surfing) y repitiendo la contrase\u00f1a OTP en el intervalo de tiempo actual."}], "lastModified": "2017-09-21T18:57:10.310", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tinfoilsecurity:devise-two-factor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9796BE8B-A754-4A3A-9B61-C40420C0E53A", "versionEndIncluding": "1.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}