Lucene search

K
nvd[email protected]NVD:CVE-2008-6131
HistoryFeb 13, 2009 - 6:30 p.m.

CVE-2008-6131

2009-02-1318:30:04
CWE-287
web.nvd.nist.gov
2

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

75.9%

Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected configurations

Nvd
Node
mozilomozilowikiRange1.0.1
OR
mozilomozilowikiMatch0.7
OR
mozilomozilowikiMatch0.8
OR
mozilomozilowikiMatch0.9
OR
mozilomozilowikiMatch0.10
OR
mozilomozilowikiMatch1.0.0
VendorProductVersionCPE
mozilomozilowiki*cpe:2.3:a:mozilo:mozilowiki:*:*:*:*:*:*:*:*
mozilomozilowiki0.7cpe:2.3:a:mozilo:mozilowiki:0.7:*:*:*:*:*:*:*
mozilomozilowiki0.8cpe:2.3:a:mozilo:mozilowiki:0.8:*:*:*:*:*:*:*
mozilomozilowiki0.9cpe:2.3:a:mozilo:mozilowiki:0.9:*:*:*:*:*:*:*
mozilomozilowiki0.10cpe:2.3:a:mozilo:mozilowiki:0.10:*:*:*:*:*:*:*
mozilomozilowiki1.0.0cpe:2.3:a:mozilo:mozilowiki:1.0.0:*:*:*:*:*:*:*

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

75.9%

Related for NVD:CVE-2008-6131