NVD

Id
3105  
Name
CVE-2008-3222  
Description
Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-18  
Modified Date
2009-08-19  
Seq
2008-3222  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
19737 3105 CVE-2008-3222 http://drupal.org/node/280571  View
19738 3105 CVE-2008-3222 http://drupal.org/node/286417  View
19739 3105 CVE-2008-3222 [oss-security] 20080710 CVE request: multiple drupal issues in < 6.3,5.8  View
19740 3105 CVE-2008-3222 30168  View
19741 3105 CVE-2008-3222 30359  View
19742 3105 CVE-2008-3222 drupal-unspecified-session-hijacking(43706)  View
19743 3105 CVE-2008-3222 https://bugzilla.redhat.com/show_bug.cgi?id=454849  View
19744 3105 CVE-2008-3222 FEDORA-2008-6916  View
19745 3105 CVE-2008-3222 FEDORA-2008-6415  View
19746 3105 CVE-2008-3222 FEDORA-2008-6411  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46598 JVNDB-2008-001908 Drupal における提供されたモジュールに関するセッション固定の脆弱性 Drupal には、提供されたモジュールがログインイベント中に現在のリクエストを停止した場合にセッション固定の脆弱性が存在します。 CVE-2008-3222 33335 CVE-2008-3222 3105 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001908.html 2008-07-09 2008-12-01 View