CVE-2012-6077

2019-11-2218:44:55

redhat

www.cve.org

EPSS

0.003

Percentile

71.8%

JSON

W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.

CNA Affected

[
  {
    "product": "Total Cache",
    "vendor": "W3",
    "versions": [
      {
        "status": "affected",
        "version": "0.9.2.5"
      }
    ]
  }
]

References

www.openwall.com/lists/oss-security/2012/12/30/3

security-tracker.debian.org/tracker/CVE-2012-6077

www.acunetix.com/vulnerabilities/web/wordpress-w3-total-cache-plugin-predictable-cache-filenames/

www.checkpoint.com/defense/advisories/public/2013/cpai-24-oct2.html

www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/

EPSS

0.003

Percentile

71.8%

JSON

Related for CVELIST:CVE-2012-6077