CVE-2008-4122

Опубликовано: 19 дек. 2008

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Ссылки

http://int21.de/cve/CVE-2008-4122-joomla.html
Third Party Advisory
http://securityreason.com/securityalert/4794
Third Party Advisory
http://www.securityfocus.com/archive/1/499295/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/499354/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://int21.de/cve/CVE-2008-4122-joomla.html
Third Party Advisory
http://securityreason.com/securityalert/4794
Third Party Advisory
http://www.securityfocus.com/archive/1/499295/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/499354/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:joomla:joomla\!:1.5.8:*:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00018

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-319

Связанные уязвимости

GHSA-5m95-8m7x-3gcp