Vulnerability Name: | CVE-2014-3882 (CCN-94006) | ||||||||
Assigned: | 2014-06-24 | ||||||||
Published: | 2014-06-24 | ||||||||
Updated: | 2014-06-25 | ||||||||
Summary: | Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users. | ||||||||
CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-352 | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: CONFIRM Type: Patch, Vendor Advisory http://12net.jp/news/n20140623_01.html Source: MITRE Type: CNA CVE-2014-3882 Source: CCN Type: JVN#05329568 Login rebuilder vulnerable to cross-site request forgery Source: JVN Type: UNKNOWN JVN#05329568 Source: JVNDB Type: UNKNOWN JVNDB-2014-000062 Source: CCN Type: WordPress Web site WordPress Login rebuilder laquo - WordPress Plugins Source: CONFIRM Type: Patch http://wordpress.org/plugins/login-rebuilder/changelog/ Source: CCN Type: OSVDB ID: 108364 Login Builder Plugin for WordPress Unspecified CSRF Source: CCN Type: BID-68166 WordPress Login rebuilder Plugin CVE-2014-3882 Cross Site Request Forgery Vulnerability Source: XF Type: UNKNOWN loginrebuilder-wordpress-cve20143882-csrf(94006) | ||||||||
Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
BACK |