PT-2016-6171 · Collne · Collne Welcart E-Commerce Plugin

Gen Sato · Publicado 2016-06-25 · Atualizado 2021-09-09 · CVE-2016-4828

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Collne Welcart e-Commerce plugin versions prior to 1.8.3

Description The issue is related to the mishandling of sessions, allowing remote attackers to gain access by using the knowledge of the e-mail address associated with an account.

Recommendations For versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2016-4828

Produtos afetados

Collne Welcart E-Commerce Plugin

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-4828 · Aviso do Fabricante
• http://welcart.com/community/archives/78977 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4828 · Nota de Segurança
• http://jvn.jp/en/jp/JVN61578437/index.html · Aviso do Fabricante
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118 · Aviso do Fabricante