Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-6013
HistoryNov 19, 2007 - 9:46 p.m.

CVE-2007-6013

2007-11-1921:46:00
CWE-327
mitre
web.nvd.nist.gov
28
wordpress
vulnerability
authentication bypass
cookie manipulation
cve-2007-6013
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.012

Percentile

85.1%

JSON

Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.

Affected configurations

Nvd
Node
wordpresswordpressRange1.5–2.3.1
Node
fedoraprojectfedoraMatch7
OR
fedoraprojectfedoraMatch8
VendorProductVersionCPE
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
fedoraprojectfedora7cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*
fedoraprojectfedora8cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*

Related

prion 2
ubuntucve 2
nvd 2
debiancve 2
patchstack 1
cvelist 2
fedora 2
openvas 4
cve 1
nessus 2
securityvulns 1
prion
prion
Authentication flaw
2007-11-19 21:46:00
Design/Logic Flaw
2008-04-28 20:05:00
ubuntucve
ubuntucve
CVE-2007-6013
2007-11-19 00:00:00
CVE-2008-1930
2008-04-28 00:00:00
nvd
nvd
CVE-2007-6013
2007-11-19 21:46:00
CVE-2008-1930
2008-04-28 20:05:00
debiancve
debiancve
CVE-2007-6013
2007-11-19 21:46:00
CVE-2008-1930
2008-04-28 20:05:00
patchstack
patchstack
WordPress <= 2.3.1 - Cookie Authentication Vulnerability
2007-11-19 00:00:00
cvelist
cvelist
CVE-2007-6013
2007-11-19 21:00:00
CVE-2008-1930
2008-04-28 18:21:00
fedora
fedora
[SECURITY] Fedora 8 Update: wordpress-2.3.2-1.fc8
2008-01-03 01:39:27
[SECURITY] Fedora 7 Update: wordpress-2.3.2-1.fc7
2008-01-03 01:41:39
openvas
openvas
Fedora Update for wordpress FEDORA-2008-0126
2009-02-17 00:00:00
Fedora Update for wordpress FEDORA-2008-0126
2009-02-17 00:00:00
Fedora Update for wordpress FEDORA-2008-0103
2009-02-17 00:00:00
cve
cve
CVE-2008-1930
2008-04-28 20:05:00
nessus
nessus
Fedora 7 : wordpress-2.3.2-1.fc7 (2008-0126)
2008-01-04 00:00:00
Fedora 8 : wordpress-2.3.2-1.fc8 (2008-0103)
2008-01-04 00:00:00
securityvulns
securityvulns
Wordpress 2.5 Cookie Integrity Protection Vulnerability
2008-04-27 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.012

Percentile

85.1%

JSON
Related for CVE-2007-6013
prion2ubuntucve2nvd2debiancve2patchstack1cvelist2fedora2openvas4cve1nessus2securityvulns1