Lucene search

K
patchstackJan LieskovskyPATCHSTACK:00BE1F5D42F8DE7E3312691DA18A5032
HistoryFeb 19, 2013 - 12:00 a.m.

WordPress <= 3.5.1 - Denial of Service Attacks

2013-02-1900:00:00
Jan Lieskovsky
patchstack.com
9

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

This WordPress version is prone to denial of service attacks via a crafted value of a certain wp-postpass cookie.

Solution

           Update WordPress.
CPENameOperatorVersion
wordpressle3.5.1

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P