PT-2020-7124 · Unknown · Vanilla Forums

Josh Bressers · Published 2020-01-22 · Updated 2020-01-28 · CVE-2011-3613

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17.9

Description An issue exists due to the way cookies are handled.

Recommendations For versions prior to 2.0.17.9, update to version 2.0.17.9 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-3613

Affected Products

Vanilla Forums

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2011-3613 · Security Note
• https://packetstormsecurity.com/files/105853/Secunia-Security-Advisory-46387.html · Note
• https://t.me/cibsecurity/9360 · Telegram Post
• https://openwall.com/lists/oss-security/2011/10/10/5 · Note
• https://t.me/cvenotify/375 · Telegram Post
• https://t.me/cibsecurity/9451 · Telegram Post