JVNDB-2020-000051

[Japanese]
JVNDB-2020-000051
Multiple vulnerabilities in multiple PHP Factory products
Overview
Multiple products provided by PHP Factory contain multiple vulnerabilities listed below. * Cross-site Request Forgery (CWE-352) - CVE-2020-5615 * Authentication bypass (CWE-287) - CVE-2020-5616 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
CVSS Severity (What is CVSS?)
CVSS V3 Severity: Base Metrics 4.8 (Medium) [IPA Score] Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality Impact: Low Integrity Impact: Low Availability Impact: None CVSS V2 Severity: Base Metrics 4.0 (Medium) [IPA Score] Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None The above CVSS base scores have been assigned for CVE-2020-5616
CVSS V3 Severity: Base Metrics: 4.3 (Medium) [IPA Score] Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality Impact: None Integrity Impact: Low Availability Impact: None CVSS V2 Severity: Base Metrics: 2.6 (Low) [IPA Score] Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None The above CVSS base scores have been assigned for CVE-2020-5615
Affected Products

PHP Kobo [Calendar01] (for 3 Devices) PHP Business Days, Schedule Calendar free edition PHP Business Days, Schedule Calendar Free (Text input) (Acceptance Limit)Appoinment, Application Form, Business Calendar Free Photo Gallery CMS for PC, smartphone and feature phone (Free) PHP Link CMS Free PHP New Information, Notice, News CMS Program Free PHP Vote, Questionnaire System (Preventing Countinuous Voting), CMS Free [Telop01] PHP Telop, News Sticker, Headline CMS free edition
CVE-2020-5615 * [Calendar01] free edition ver1.0.0 * [Calendar02] free edition ver1.0.0 CVE-2020-5616 * [Calendar01] free edition ver1.0.0 * [Calendar02] free edition ver1.0.0 * [PKOBO-News01] free edition ver1.0.3 and earlier * [PKOBO-vote01] free edition ver1.0.1 and earlier * [Telop01] free edition ver1.0.0 * [Gallery01] free edition ver1.0.3 and earlier * [CalendarForm01] free edition ver1.0.3 and earlier * [Link01] free edition ver1.0.0
Impact
* If a user views a malicious page while logged in, unintended operations may be performed - CVE-2020-5615 * A remote attacker under certain conditions may log in to the product with administrative privileges - CVE-2020-5616
Solution
[Update the software] - CVE-2020-5615 Update the software to the latest version according to the information provided by the developer. [Add code to the affected file] - CVE-2020-5616 Add code to the affected file according to the information provided by the developer.
Vendor Information
PHP Kobo PHP Kobo : [Calendar01] free edition (in Japanese) PHP Kobo : [Calendar02] free edition (in Japanese) PHP Kobo : [PKOBO-News01] free edition (in Japanese) PHP Kobo : [PKOBO-vote01] free edition (in Japanese) PHP Kobo : [Telop01] free edition (in Japanese) PHP Kobo : [Gallery01] free edition (in Japanese) PHP Kobo : [CalendarForm01] free edition (in Japanese) PHP Kobo : [Link01] free edition (in Japanese)
CWE (What is CWE?)
Permissions(CWE-264) [IPA Evaluation] Cross-Site Request Forgery(CWE-352) [IPA Evaluation]
CVE (What is CVE?)
CVE-2020-5615 CVE-2020-5616
References
JVN : JVN#73169744
Revision History
[2020/07/31] Web page was published


Date Public	2020/07/31
Date First Published	2020/07/31
Date Last Updated	2020/07/31

Multiple vulnerabilities in multiple PHP Factory products