PT-2007-5383 · Open Source Matters · Joomla!

Publicado 2007-08-08 · Atualizado 2021-10-01 · CVE-2007-4188

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.0.13

Description A session fixation issue allows remote attackers to hijack administrative web sessions. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 1.0.13, update to version 1.0.13 or later to resolve the issue.

Correção

Session Fixation

Enumeração de Fraquezas

CWE-384

Identificadores relacionados

CVE-2007-4188

Produtos afetados

Joomla!

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-4188 · Nota de Segurança
• http://joomla.org/content/view/3677/1 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4188 · Nota
• http://vupen.com/english/advisories/2007/2719 · Nota
• http://secunia.com/advisories/26239 · Aviso do Fabricante
• http://securityfocus.com/archive/1/476017/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35953 · Nota