Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2017-11364

Improper Certificate Validation

Published: Aug 02, 2017 | Modified: Aug 04, 2017
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-11364
CWEhttps://cwe.mitre.org/data/definitions/295.html

The CMS installer in Joomla! before 3.7.4 does not verify a users ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Joomla! Joomla 1.0.0 (including) 1.0.0 (including)
Joomla! Joomla 1.0.1 (including) 1.0.1 (including)
Joomla! Joomla 1.0.2 (including) 1.0.2 (including)
Joomla! Joomla 1.0.3 (including) 1.0.3 (including)
Joomla! Joomla 1.0.4 (including) 1.0.4 (including)
Joomla! Joomla 1.0.5 (including) 1.0.5 (including)
Joomla! Joomla 1.0.6 (including) 1.0.6 (including)
Joomla! Joomla 1.0.7 (including) 1.0.7 (including)
Joomla! Joomla 1.0.8 (including) 1.0.8 (including)
Joomla! Joomla 1.0.9 (including) 1.0.9 (including)
Joomla! Joomla 1.0.10 (including) 1.0.10 (including)
Joomla! Joomla 1.0.11 (including) 1.0.11 (including)
Joomla! Joomla 1.0.12 (including) 1.0.12 (including)
Joomla! Joomla 1.0.13 (including) 1.0.13 (including)
Joomla! Joomla 1.0.14 (including) 1.0.14 (including)
Joomla! Joomla 1.0.15 (including) 1.0.15 (including)
Joomla! Joomla 1.5.0 (including) 1.5.0 (including)
Joomla! Joomla 1.5.1 (including) 1.5.1 (including)
Joomla! Joomla 1.5.2 (including) 1.5.2 (including)
Joomla! Joomla 1.5.3 (including) 1.5.3 (including)
Joomla! Joomla 1.5.4 (including) 1.5.4 (including)
Joomla! Joomla 1.5.5 (including) 1.5.5 (including)
Joomla! Joomla 1.5.6 (including) 1.5.6 (including)
Joomla! Joomla 1.5.7 (including) 1.5.7 (including)
Joomla! Joomla 1.5.8 (including) 1.5.8 (including)
Joomla! Joomla 1.5.9 (including) 1.5.9 (including)
Joomla! Joomla 1.5.10 (including) 1.5.10 (including)
Joomla! Joomla 1.5.11 (including) 1.5.11 (including)
Joomla! Joomla 1.5.12 (including) 1.5.12 (including)
Joomla! Joomla 1.5.13 (including) 1.5.13 (including)
Joomla! Joomla 1.5.14 (including) 1.5.14 (including)
Joomla! Joomla 1.5.15 (including) 1.5.15 (including)
Joomla! Joomla 1.5.15-rc (including) 1.5.15-rc (including)
Joomla! Joomla 1.5.16 (including) 1.5.16 (including)
Joomla! Joomla 1.5.17 (including) 1.5.17 (including)
Joomla! Joomla 1.5.18 (including) 1.5.18 (including)
Joomla! Joomla 1.5.19 (including) 1.5.19 (including)
Joomla! Joomla 1.5.20 (including) 1.5.20 (including)
Joomla! Joomla 1.5.21 (including) 1.5.21 (including)
Joomla! Joomla 1.5.22 (including) 1.5.22 (including)
Joomla! Joomla 1.5.23 (including) 1.5.23 (including)
Joomla! Joomla 1.5.24 (including) 1.5.24 (including)
Joomla! Joomla 1.5.25 (including) 1.5.25 (including)
Joomla! Joomla 1.5.26 (including) 1.5.26 (including)
Joomla! Joomla 1.6-alpha (including) 1.6-alpha (including)
Joomla! Joomla 1.6-alpha2 (including) 1.6-alpha2 (including)
Joomla! Joomla 1.6-beta1 (including) 1.6-beta1 (including)
Joomla! Joomla 1.6-beta10 (including) 1.6-beta10 (including)
Joomla! Joomla 1.6-beta11 (including) 1.6-beta11 (including)
Joomla! Joomla 1.6-beta12 (including) 1.6-beta12 (including)
Joomla! Joomla 1.6-beta13 (including) 1.6-beta13 (including)
Joomla! Joomla 1.6-beta14 (including) 1.6-beta14 (including)
Joomla! Joomla 1.6-beta15 (including) 1.6-beta15 (including)
Joomla! Joomla 1.6-beta2 (including) 1.6-beta2 (including)
Joomla! Joomla 1.6-beta3 (including) 1.6-beta3 (including)
Joomla! Joomla 1.6-beta4 (including) 1.6-beta4 (including)
Joomla! Joomla 1.6-beta5 (including) 1.6-beta5 (including)
Joomla! Joomla 1.6-beta6 (including) 1.6-beta6 (including)
Joomla! Joomla 1.6-beta7 (including) 1.6-beta7 (including)
Joomla! Joomla 1.6-beta8 (including) 1.6-beta8 (including)
Joomla! Joomla 1.6-beta9 (including) 1.6-beta9 (including)
Joomla! Joomla 1.6-rc1 (including) 1.6-rc1 (including)
Joomla! Joomla 1.6.0 (including) 1.6.0 (including)
Joomla! Joomla 1.6.1 (including) 1.6.1 (including)
Joomla! Joomla 1.6.2 (including) 1.6.2 (including)
Joomla! Joomla 1.6.3 (including) 1.6.3 (including)
Joomla! Joomla 1.6.4 (including) 1.6.4 (including)
Joomla! Joomla 1.6.5 (including) 1.6.5 (including)
Joomla! Joomla 1.6.6 (including) 1.6.6 (including)
Joomla! Joomla 1.7.0 (including) 1.7.0 (including)
Joomla! Joomla 1.7.1 (including) 1.7.1 (including)
Joomla! Joomla 1.7.2 (including) 1.7.2 (including)
Joomla! Joomla 1.7.3 (including) 1.7.3 (including)
Joomla! Joomla 1.7.4 (including) 1.7.4 (including)
Joomla! Joomla 1.7.5 (including) 1.7.5 (including)
Joomla! Joomla 2.5.0 (including) 2.5.0 (including)
Joomla! Joomla 2.5.1 (including) 2.5.1 (including)
Joomla! Joomla 2.5.2 (including) 2.5.2 (including)
Joomla! Joomla 2.5.3 (including) 2.5.3 (including)
Joomla! Joomla 2.5.4 (including) 2.5.4 (including)
Joomla! Joomla 2.5.5 (including) 2.5.5 (including)
Joomla! Joomla 2.5.6 (including) 2.5.6 (including)
Joomla! Joomla 2.5.7 (including) 2.5.7 (including)
Joomla! Joomla 2.5.8 (including) 2.5.8 (including)
Joomla! Joomla 2.5.9 (including) 2.5.9 (including)
Joomla! Joomla 2.5.10 (including) 2.5.10 (including)
Joomla! Joomla 2.5.11 (including) 2.5.11 (including)
Joomla! Joomla 2.5.12 (including) 2.5.12 (including)
Joomla! Joomla 2.5.13 (including) 2.5.13 (including)
Joomla! Joomla 2.5.14 (including) 2.5.14 (including)
Joomla! Joomla 2.5.15 (including) 2.5.15 (including)
Joomla! Joomla 2.5.16 (including) 2.5.16 (including)
Joomla! Joomla 2.5.17 (including) 2.5.17 (including)
Joomla! Joomla 2.5.18 (including) 2.5.18 (including)
Joomla! Joomla 2.5.19 (including) 2.5.19 (including)
Joomla! Joomla 2.5.20 (including) 2.5.20 (including)
Joomla! Joomla 2.5.21 (including) 2.5.21 (including)
Joomla! Joomla 2.5.22 (including) 2.5.22 (including)
Joomla! Joomla 2.5.23 (including) 2.5.23 (including)
Joomla! Joomla 2.5.24 (including) 2.5.24 (including)
Joomla! Joomla 2.5.25 (including) 2.5.25 (including)
Joomla! Joomla 2.5.26 (including) 2.5.26 (including)
Joomla! Joomla 2.5.27 (including) 2.5.27 (including)
Joomla! Joomla 2.5.28 (including) 2.5.28 (including)
Joomla! Joomla 3.0.0 (including) 3.0.0 (including)
Joomla! Joomla 3.0.1 (including) 3.0.1 (including)
Joomla! Joomla 3.0.2 (including) 3.0.2 (including)
Joomla! Joomla 3.0.3 (including) 3.0.3 (including)
Joomla! Joomla 3.0.4 (including) 3.0.4 (including)
Joomla! Joomla 3.1.0 (including) 3.1.0 (including)
Joomla! Joomla 3.1.1 (including) 3.1.1 (including)
Joomla! Joomla 3.1.2 (including) 3.1.2 (including)
Joomla! Joomla 3.1.3 (including) 3.1.3 (including)
Joomla! Joomla 3.1.4 (including) 3.1.4 (including)
Joomla! Joomla 3.1.5 (including) 3.1.5 (including)
Joomla! Joomla 3.1.6 (including) 3.1.6 (including)
Joomla! Joomla 3.2.0 (including) 3.2.0 (including)
Joomla! Joomla 3.2.1 (including) 3.2.1 (including)
Joomla! Joomla 3.2.2 (including) 3.2.2 (including)
Joomla! Joomla 3.2.3 (including) 3.2.3 (including)
Joomla! Joomla 3.2.4 (including) 3.2.4 (including)
Joomla! Joomla 3.2.5 (including) 3.2.5 (including)
Joomla! Joomla 3.2.6 (including) 3.2.6 (including)
Joomla! Joomla 3.2.7 (including) 3.2.7 (including)
Joomla! Joomla 3.3.0 (including) 3.3.0 (including)
Joomla! Joomla 3.3.1 (including) 3.3.1 (including)
Joomla! Joomla 3.3.2 (including) 3.3.2 (including)
Joomla! Joomla 3.3.3 (including) 3.3.3 (including)
Joomla! Joomla 3.3.4 (including) 3.3.4 (including)
Joomla! Joomla 3.3.5 (including) 3.3.5 (including)
Joomla! Joomla 3.3.6 (including) 3.3.6 (including)
Joomla! Joomla 3.4.0 (including) 3.4.0 (including)
Joomla! Joomla 3.4.0-alpha (including) 3.4.0-alpha (including)
Joomla! Joomla 3.4.0-beta1 (including) 3.4.0-beta1 (including)
Joomla! Joomla 3.4.0-beta2 (including) 3.4.0-beta2 (including)
Joomla! Joomla 3.4.0-beta3 (including) 3.4.0-beta3 (including)
Joomla! Joomla 3.4.0-rc1 (including) 3.4.0-rc1 (including)
Joomla! Joomla 3.4.1 (including) 3.4.1 (including)
Joomla! Joomla 3.4.1-rc1 (including) 3.4.1-rc1 (including)
Joomla! Joomla 3.4.1-rc2 (including) 3.4.1-rc2 (including)
Joomla! Joomla 3.4.2-rc1 (including) 3.4.2-rc1 (including)
Joomla! Joomla 3.4.3 (including) 3.4.3 (including)
Joomla! Joomla 3.4.4 (including) 3.4.4 (including)
Joomla! Joomla 3.4.5 (including) 3.4.5 (including)
Joomla! Joomla 3.4.6 (including) 3.4.6 (including)
Joomla! Joomla 3.4.7 (including) 3.4.7 (including)
Joomla! Joomla 3.4.8 (including) 3.4.8 (including)
Joomla! Joomla 3.4.8-rc (including) 3.4.8-rc (including)
Joomla! Joomla 3.5.0 (including) 3.5.0 (including)
Joomla! Joomla 3.5.0-beta (including) 3.5.0-beta (including)
Joomla! Joomla 3.5.0-beta2 (including) 3.5.0-beta2 (including)
Joomla! Joomla 3.5.0-beta3 (including) 3.5.0-beta3 (including)
Joomla! Joomla 3.5.0-beta4 (including) 3.5.0-beta4 (including)
Joomla! Joomla 3.5.0-beta5 (including) 3.5.0-beta5 (including)
Joomla! Joomla 3.5.0-rc (including) 3.5.0-rc (including)
Joomla! Joomla 3.5.0-rc2 (including) 3.5.0-rc2 (including)
Joomla! Joomla 3.5.0-rc3 (including) 3.5.0-rc3 (including)
Joomla! Joomla 3.5.0-rc4 (including) 3.5.0-rc4 (including)
Joomla! Joomla 3.5.1 (including) 3.5.1 (including)
Joomla! Joomla 3.5.1-rc (including) 3.5.1-rc (including)
Joomla! Joomla 3.6.0 (including) 3.6.0 (including)
Joomla! Joomla 3.6.0-alpha (including) 3.6.0-alpha (including)
Joomla! Joomla 3.6.0-beta1 (including) 3.6.0-beta1 (including)
Joomla! Joomla 3.6.0-beta2 (including) 3.6.0-beta2 (including)
Joomla! Joomla 3.6.0-rc (including) 3.6.0-rc (including)
Joomla! Joomla 3.6.0-rc2 (including) 3.6.0-rc2 (including)
Joomla! Joomla 3.6.1 (including) 3.6.1 (including)
Joomla! Joomla 3.6.1-rc1 (including) 3.6.1-rc1 (including)
Joomla! Joomla 3.6.1-rc2 (including) 3.6.1-rc2 (including)
Joomla! Joomla 3.6.2 (including) 3.6.2 (including)
Joomla! Joomla 3.6.3 (including) 3.6.3 (including)
Joomla! Joomla 3.6.3-rc1 (including) 3.6.3-rc1 (including)
Joomla! Joomla 3.6.3-rc2 (including) 3.6.3-rc2 (including)
Joomla! Joomla 3.6.3-rc3 (including) 3.6.3-rc3 (including)
Joomla! Joomla 3.6.4 (including) 3.6.4 (including)
Joomla! Joomla 3.6.5 (including) 3.6.5 (including)
Joomla! Joomla 3.7.0 (including) 3.7.0 (including)
Joomla! Joomla 3.7.1 (including) 3.7.1 (including)
Joomla! Joomla 3.7.2 (including) 3.7.2 (including)
Joomla! Joomla 3.7.3 (including) 3.7.3 (including)

Potential Mitigations

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use