Lucene search

K
redosRedosROS-20240816-10
HistoryAug 16, 2024 - 12:00 a.m.

ROS-20240816-10

2024-08-1600:00:00
redos.red-soft.ru
6
vulnerability
php interpreter
cookie handling
remote hijacking
unauthorized access
protected information
unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

Low

A vulnerability in the PHP programming language interpreter is related to the erroneous handling of cookies due to the replacement of spaces, dots, and open square brackets with underscores.
as a result of replacing spaces, periods and open square brackets with underscores. Exploitation
vulnerability could allow a remote attacker to hijack a session and gain unauthorized access to the protected information.
unauthorized access to protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64php< 8.1.24-1UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

Low