PT-2008-5106 · WordPress · Wordpress

Hanno Böck · Publicado 2008-08-27 · Atualizado 2017-08-08 · CVE-2008-3747

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 2.6.1

Description The issue concerns the get edit post link and get edit comment link functions in WordPress, which do not enforce SSL communication as intended. This could allow remote attackers to gain administrative access by intercepting cookies over the network.

Recommendations For versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-3747

Produtos afetados

Wordpress

Referências · 10

• https://security-tracker.debian.org/tracker/CVE-2008-3747 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2008/08/19/1 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3747 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3747 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44569 · Nota
• https://osv.dev/vulnerability/CVE-2008-3747 · Aviso do Fabricante
• http://trac.wordpress.org/ticket/7359 · Correção
• http://securityfocus.com/bid/30750 · Nota
• http://openwall.com/lists/oss-security/2008/08/20/3 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-3747 · Aviso do Fabricante