CVE-2011-1766

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-05-23 · updated 2026-06-16
Weakness: CWE-287

Description

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an unattended workstation.

Affected products

Wikimedia Foundation MediaWiki: through 1.16.4; 1.1.0, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4 (+130)

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060435.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060496.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060507.html
http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-May/000098.html
http://secunia.com/advisories/44684
http://www.securityfocus.com/bid/47722
https://bugzilla.redhat.com/show_bug.cgi?id=702512
https://bugzilla.wikimedia.org/show_bug.cgi?id=28639
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060435.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060496.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060507.html
http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-May/000098.html

Get alerted when CVE-2011-1766 or the next vulnerability affects your stack