PT-2021-8330 · Joomla · Joomla!

Raúl Siles + 1 · Published 2021-06-21 · Updated 2021-06-25 · CVE-2010-1434

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 1.5.0 through 1.5.15

Description The issue allows an attacker to hijack an arbitrary session and gain access to sensitive information, potentially leading to further attacks. This is due to a session fixation issue.

Recommendations For versions 1.5.0 through 1.5.15, update to a version that fixes this issue to prevent session hijacking. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2010-1434

Affected Products

Joomla!

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-1434 · Security Note
• https://developer.joomla.org/security-centre/309-20100423-core-sessation-fixation.html · Vendor Advisory
• https://acunetix.com/vulnerabilities/web/joomla-core-1-5-x-session-fixation-1-5-0-1-5-15 · Note