CVE-2013-4572 in MediaWiki
Summary
The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-Control header to cache session cookies when a user is autocreated, which allows remote attackers to authenticate as the created user.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
06/12/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11233 | MediaWiki HTTP Header Caching improper authentication | 287 | Not defined | Official fix | CVE-2013-4572 |