CVE-2012-5395

EPSS 0.54%
Published 02.06.2014 15:55:08
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

Session fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the centralauth_Session cookie.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Mediawiki ≫ Mediawiki Version1.20

Mediawiki ≫ Mediawiki Version1.19

Mediawiki ≫ Mediawiki Version1.19 Updatebeta_1

Mediawiki ≫ Mediawiki Version1.19 Updatebeta_2

Mediawiki ≫ Mediawiki Version1.19.1

Mediawiki ≫ Mediawiki Version1.19.2

Mediawiki ≫ Mediawiki Version <= 1.18.5

Mediawiki ≫ Mediawiki Version1.18

Mediawiki ≫ Mediawiki Version1.18 Updatebeta_1

Mediawiki ≫ Mediawiki Version1.18.0

Mediawiki ≫ Mediawiki Version1.18.0 Updaterc1

Mediawiki ≫ Mediawiki Version1.18.1

Mediawiki ≫ Mediawiki Version1.18.2

Mediawiki ≫ Mediawiki Version1.18.3

Mediawiki ≫ Mediawiki Version1.18.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.54%	0.665

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-November/000122.html

Vendor Advisory

https://bugzilla.wikimedia.org/show_bug.cgi?id=40962

https://nvd.nist.gov/vuln/detail/CVE-2012-5395

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-5395

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-5395

EUVD