Lucene search
GoogleOSV:CVE-2017-5493HistoryJan 15, 2017 - 2:59 a.m.
CVE-2017-5493
2017-01-1502:59:03
Google
osv.dev
8
wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers to bypass intended access restrictions via a crafted (1) site signup or (2) user signup.
References
www.debian.org/security/2017/dsa-3779
www.openwall.com/lists/oss-security/2017/01/14/6
www.securityfocus.com/bid/95401
www.securitytracker.com/id/1037591
codex.wordpress.org/Version_4.7.1
github.com/WordPress/WordPress/commit/cea9e2dc62abf777e06b12ec4ad9d1aaa49b29f4
wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/
wpvulndb.com/vulnerabilities/8721
Related
wpvulndb
wpvulndb
debiancve
debiancve
CVE-2017-5493
2017-01-15 02:59:03
cve
cve
CVE-2017-5493
2017-01-15 02:59:03
nvd
nvd
CVE-2017-5493
2017-01-15 02:59:03
cvelist
cvelist
CVE-2017-5493
2017-01-15 02:00:00
ubuntucve
ubuntucve
CVE-2017-5493
2017-01-15 00:00:00
prion
prion
Design/Logic Flaw
2017-01-15 02:59:00
freebsd
freebsd
wordpress -- multiple vulnerabilities
2017-01-11 00:00:00
nessus
nessus
FreeBSD : wordpress -- multiple vulnerabilities (b180d1fb-dac6-11e6-ae1b-002590263bf5)
2017-01-16 00:00:00
WordPress < 4.7.1 Multiple Vulnerabilities
2017-01-17 00:00:00
WordPress 4.0.x < 4.0.14 Multiple Vulnerabilities
2018-11-05 00:00:00
openvas
openvas
WordPress < 4.7.1 Multiple Security Vulnerabilities - Windows
2017-01-20 00:00:00
WordPress < 4.7.1 Multiple Security Vulnerabilities - Linux
2017-01-20 00:00:00
Debian Security Advisory DSA 3779-1 (wordpress - security update)
2017-02-03 00:00:00
debian
debian
[SECURITY] [DSA 3779-1] wordpress security update
2017-02-01 14:30:41
[BSA-114] Security update for wordpress
2017-01-23 07:39:04
[SECURITY] [DLA 813-1] wordpress security update
2017-02-01 08:02:56
osv
osv
wordpress - security update
2017-02-01 00:00:00
wordpress - security update
2017-02-01 00:00:00
archlinux
archlinux
[ASA-201701-22] wordpress: multiple issues
2017-01-15 00:00:00