Check Point finds Vulnerability in Open-Source Web

Check Point Software Technologies has released its findings of a critical vulnerability in the MediaWiki project Web platform used to create and maintain “wiki” Web sites. 

Check Point researchers discovered that this critical vulnerability left MediaWiki (version 1.8 onwards) exposed to remote code execution (RCE), where an attacker can gain complete control of the vulnerable web server.

The company immediately alerted the WikiMedia Foundation about the vulnerability, and after verification, the Foundation issued an update and patch to the MediaWiki software. Check Point’s Vulnerability Research Group regularly performs assessments of common software to ensure the security of Internet users worldwide. Customers with the Check Point Intrusion Prevention System (IPS) Software Blade automatically received detections for this vulnerability.

“The Check Point Vulnerability Research Group focusses on finding these security exposures and deploying the necessary real-time protections to secure the Internet. We are pleased that the MediaWiki platform is now protected against attacks on this vulnerability, which would have posed great security risk for millions of daily ‘wiki’ site users,” said Dorit Dor, Vice-President of Products, Check Point Software Technologies.

The WikiMedia Foundation released a software update after learning of the vulnerability from Check Point and encouraged all MediaWiki customers to apply the patch as soon as possible.