NVD

Id
46574  
Name
CVE-2012-5391  
Description
Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the session_id.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-02  
Modified Date
2014-06-03  
Seq
2012-5391  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233286 46574 CVE-2012-5391 FEDORA-2013-2090  View
233287 46574 CVE-2012-5391 FEDORA-2013-3227  View
233288 46574 CVE-2012-5391 FEDORA-2013-3265  View
233289 46574 CVE-2012-5391 [MediaWiki-announce] 20121130 MediaWiki security release: 1.20.1, 1.19.3 and 1.18.6  View
233290 46574 CVE-2012-5391 mediawiki-cve20125391-session-hijacking(83008)  View
233291 46574 CVE-2012-5391 https://bugzilla.wikimedia.org/show_bug.cgi?id=40995  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30519 JVNDB-2012-006227 MediaWiki の Special:UserLogin における Web セッションをハイジャックされる脆弱性 MediaWiki の Special:UserLogin には、Web セッションをハイジャックされる脆弱性が存在します。 CVE-2012-5391 58629 CVE-2012-5391 46574 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006227.html 2012-11-30 2014-06-04 View