CVE-2009-2432 — Wordpress vulnerability

CWE-2646 documents6 sources

Severity

5.0MEDIUMNVD

EPSS

1.1%

top 22.20%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wordpress Debian Wordpress Wordpress MU

Timeline

PublishedJul 10

Latest updateMay 2

Description

WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages4 packages

▶debiandebian/wordpress< wordpress 2.8.3-1 (bookworm)

▶Debianwordpress/wordpress< 2.8.3-1+3

▶NVDwordpress/wordpress2.7.1+65

▶NVDwordpress/wordpress_mu2.7+19

Patches

Patch: www.osvdb.org ↗Patch: www.vupen.com ↗Patch: www.osvdb.org ↗

🔴Vulnerability Details

GHSA

GHSA-5x2f-7539-frwf: WordPress and WordPress MU before 2↗2022-05-02

▶

OSV

CVE-2009-2432: WordPress and WordPress MU before 2↗2009-07-10

▶

📋Vendor Advisories

Red Hat

wordpress: multiple vulnerabilities↗2009-07-08

▶

Debian

CVE-2009-2432: wordpress - WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensiti...↗2009

▶

💬Community

Bugzilla

CORE-2009-0515, CVE-2009-2334, CVE-2009-2335, CVE-2009-2336 CVE-2009-2431, CVE-2009-2432 wordpress: multiple vulnerabilities↗2009-07-10

▶