Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-5204HistoryAug 18, 2014 - 11:15 a.m.
CVE-2014-5204
2014-08-1811:15:26
Debian Security Bug Tracker
security-tracker.debian.org
12
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.9%
wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in the nonce are incorrect, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wordpress | < 3.9.2+dfsg-1 | wordpress_3.9.2+dfsg-1_all.deb |
| Debian | 11 | all | wordpress | < 3.9.2+dfsg-1 | wordpress_3.9.2+dfsg-1_all.deb |
| Debian | 10 | all | wordpress | < 3.9.2+dfsg-1 | wordpress_3.9.2+dfsg-1_all.deb |
| Debian | 999 | all | wordpress | < 3.9.2+dfsg-1 | wordpress_3.9.2+dfsg-1_all.deb |
| Debian | 13 | all | wordpress | < 3.9.2+dfsg-1 | wordpress_3.9.2+dfsg-1_all.deb |
Related
nvd
nvd
CVE-2014-5204
2014-08-18 11:15:26
cve
cve
CVE-2014-5204
2014-08-18 11:15:26
cvelist
cvelist
CVE-2014-5204
2014-08-18 10:00:00
ubuntucve
ubuntucve
CVE-2014-5204
2014-08-18 00:00:00
patchstack
patchstack
WordPress <=3.9.1 - Multiple Vulnerabilities #2
2014-08-13 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-08-18 11:15:00
wpvulndb
wpvulndb
WordPress 2.0.3 - 3.9.1 (except 3.7.4 / 3.8.4) CSRF Token Brute Forcing
2014-09-16 18:06:10
openvas
openvas
Debian Security Advisory DSA 3001-1 (wordpress - security update)
2014-08-09 00:00:00
Debian: Security Advisory (DLA-56-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3001-1)
2014-08-08 00:00:00
osv
osv
wordpress - security update
2014-09-17 00:00:00
wordpress - security update
2014-08-09 00:00:00
nessus
nessus
Fedora 20 : wordpress-3.9.2-3.fc20 (2014-9264)
2014-08-22 00:00:00
Debian DSA-3001-1 : wordpress - security update
2014-08-10 00:00:00
Debian DLA-56-1 : wordpress security update
2015-03-26 00:00:00
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:09
fedora
fedora
[SECURITY] Fedora 20 Update: wordpress-3.9.2-3.fc20
2014-08-21 09:45:10
[SECURITY] Fedora 19 Update: wordpress-3.9.2-3.fc19
2014-08-23 01:58:51
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.9%
Related for DEBIANCVE:CVE-2014-5204