NVD

Id
85175  
Name
CVE-2016-6332  
Description
MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive information by leveraging failure to terminate sessions when a user account is blocked.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-04-27  
Published
2017-04-20  
Modified Date
2017-04-24  
Seq
2016-6332  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415156 85175 CVE-2014-9834 [oss-security] 20141224 Imagemagick fuzzing bug  View
415157 85175 CVE-2014-9834 [oss-security] 20160602 Re: ImageMagick CVEs  View
415158 85175 CVE-2014-9834 [oss-security] 20141224 Imagemagick fuzzing bug  View
415159 85175 CVE-2014-9834 [oss-security] 20160602 Re: ImageMagick CVEs  View
418143 85175 CVE-2017-3512 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418144 85175 CVE-2017-3512 97727  View
418145 85175 CVE-2017-3512 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418146 85175 CVE-2017-3512 97727  View

Related JVN