Lucene search

K
cvelistMitreCVELIST:CVE-2008-3747
HistoryAug 27, 2008 - 3:00 p.m.

CVE-2008-3747

2008-08-2715:00:00
mitre
www.cve.org
5

AI Score

6.6

Confidence

Low

EPSS

0.006

Percentile

77.8%

The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie.

AI Score

6.6

Confidence

Low

EPSS

0.006

Percentile

77.8%