CVE-2011-1766

CVE-2011-1766 describes an authentication bypass vulnerability in MediaWiki versions prior to 1.16.5, specifically when the wgBlockDisablesLogin setting is enabled. Attackers can exploit this by crafting wikiUserID and wikiUserName cookies or by accessing an unattended workstation, due to the system failing to clear cached data after an authentication token verification failure. This vulnerability has a CVSS score of 5.8, indicating a medium severity with network access, medium attack complexity, and potential for partial confidentiality and integrity impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.