CVE-2010-1136
published 2010-03-27CVE-2010-1136: The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login,"…
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.67%
73.9th percentile
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tiki | tikiwiki_cms_groupware | — | — |
| tiki | tikiwiki_cms_groupware | — | — |
| tiki | tikiwiki_cms_groupware | — | — |
| tiki | tikiwiki_cms_groupware | — | — |
| tiki | tikiwiki_cms_groupware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releaseshttp://osvdb.org/62801http://secunia.com/advisories/38882http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/proposals/3.x/lib/userslib.php?r1=25196&r2=25195&pathrev=25196http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25196http://www.securityfocus.com/bid/38608https://exchange.xforce.ibmcloud.com/vulnerabilities/56771http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releaseshttp://osvdb.org/62801http://secunia.com/advisories/38882http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/proposals/3.x/lib/userslib.php?r1=25196&r2=25195&pathrev=25196http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25196http://www.securityfocus.com/bid/38608https://exchange.xforce.ibmcloud.com/vulnerabilities/56771
2010-03-27
Published