Lucene search
MitreCVE-2014-2341HistoryApr 22, 2014 - 1:06 p.m.
CVE-2014-2341
2014-04-2213:06:29
CWE-287
mitre
web.nvd.nist.gov
26
cve-2014-2341
session fixation
cubecart
security vulnerability
hijack web sessions
phpsessid parameter
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.161
Percentile
96.0%
Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.
Affected configurations
Node
cubecartcubecartRange≤5.2.8
ORcubecartcubecartMatch5.2.0
ORcubecartcubecartMatch5.2.1
ORcubecartcubecartMatch5.2.2
ORcubecartcubecartMatch5.2.3
ORcubecartcubecartMatch5.2.4
ORcubecartcubecartMatch5.2.5
ORcubecartcubecartMatch5.2.6
ORcubecartcubecartMatch5.2.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cubecart | cubecart | * | cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:* |
| cubecart | cubecart | 5.2.0 | cpe:2.3:a:cubecart:cubecart:5.2.0:*:*:*:*:*:*:* |
| cubecart | cubecart | 5.2.1 | cpe:2.3:a:cubecart:cubecart:5.2.1:*:*:*:*:*:*:* |
| cubecart | cubecart | 5.2.2 | cpe:2.3:a:cubecart:cubecart:5.2.2:*:*:*:*:*:*:* |
| cubecart | cubecart | 5.2.3 | cpe:2.3:a:cubecart:cubecart:5.2.3:*:*:*:*:*:*:* |
| cubecart | cubecart | 5.2.4 | cpe:2.3:a:cubecart:cubecart:5.2.4:*:*:*:*:*:*:* |
| cubecart | cubecart | 5.2.5 | cpe:2.3:a:cubecart:cubecart:5.2.5:*:*:*:*:*:*:* |
| cubecart | cubecart | 5.2.6 | cpe:2.3:a:cubecart:cubecart:5.2.6:*:*:*:*:*:*:* |
| cubecart | cubecart | 5.2.7 | cpe:2.3:a:cubecart:cubecart:5.2.7:*:*:*:*:*:*:* |
Related
exploitpack
exploitpack
CubeCart 5.2.8 - Session Fixation
2014-04-13 00:00:00
nvd
nvd
CVE-2014-2341
2014-04-22 13:06:29
prion
prion
Session fixation
2014-04-22 13:06:00
exploitdb
exploitdb
CubeCart 5.2.8 - Session Fixation
2014-04-13 00:00:00
zdt
zdt
CubeCart 5.2.8 - Session Fixation
2014-04-13 00:00:00
seebug
seebug
CubeCart 5.2.8 - Session Fixation
2014-07-01 00:00:00
cvelist
cvelist
CVE-2014-2341
2014-04-21 14:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.161
Percentile
96.0%
Related for CVE-2014-2341