NVD

Id
58037  
Name
CVE-2007-6013  
Description
Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-11-19  
Modified Date
2011-03-09  
Seq
2007-6013  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
297281 58037 CVE-2007-6013 20071119 Wordpress Cookie Authentication Vulnerability  View
297282 58037 CVE-2007-6013 3375  View
297283 58037 CVE-2007-6013 http://trac.wordpress.org/ticket/5367  View
297284 58037 CVE-2007-6013 http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-cookie-auth.txt  View
297285 58037 CVE-2007-6013 20071119 Wordpress Cookie Authentication Vulnerability  View
297286 58037 CVE-2007-6013 1018980  View
297287 58037 CVE-2007-6013 ADV-2007-3941  View
297288 58037 CVE-2007-6013 wordpress-password-weak-security(38578)  View
297289 58037 CVE-2007-6013 FEDORA-2008-0103  View
297290 58037 CVE-2007-6013 FEDORA-2008-0126  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57647 JVNDB-2007-006339 Wordpress における認証を回避される脆弱性 Wordpress は、パスワードの MD5 ハッシュの MD5 ハッシュをベースにしたクッキー値を使用するため、認証を回避される脆弱性が存在します。 CVE-2007-6013 29368 CVE-2007-6013 58037 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006339.html 2007-11-19 2012-12-20 View