Lucene search

[email protected]CVE-2007-4203

HistoryAug 08, 2007 - 1:17 a.m.

CVE-2007-4203

2007-08-0801:17:00

CWE-287

[email protected]

web.nvd.nist.gov

cve-2007-4203

mambo

cms

session fixation

vulnerability

hijacking

web sessions

6.7 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%

JSON

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter.

Affected configurations

NVD

Node

mambomambo_open_sourceMatch4.6.2

CPENameOperatorVersion
mambo:mambo_open_sourcemambo mambo open sourceeq4.6.2

CPE	Name	Operator	Version
mambo:mambo_open_source	mambo mambo open source	eq	4.6.2

References

osvdb.org/42514

securityreason.com/securityalert/2970

www.securityfocus.com/archive/1/475241/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/35744

6.7 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%

JSON

Related for CVE-2007-4203

prion1 nvd1 cvelist1