CVE Vulnerabilities

CVE-2014-2341

Improper Authentication

Published: Apr 22, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Cubecart Cubecart * 5.2.8
Cubecart Cubecart 5.2.1 5.2.1
Cubecart Cubecart 5.2.4 5.2.4
Cubecart Cubecart 5.2.2 5.2.2
Cubecart Cubecart 5.2.5 5.2.5
Cubecart Cubecart 5.2.3 5.2.3
Cubecart Cubecart 5.2.6 5.2.6
Cubecart Cubecart 5.2.7 5.2.7
Cubecart Cubecart 5.2.0 5.2.0

Potential Mitigations

References