CVE-2014-9037 in WordPress
Resumen (Inglés)
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.
Reservar
2014-11-20
Divulgación
2014-11-25
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68564 | WordPress MD5 Hash cifrado débil | 310 | No probado | Arreglo oficial | CVE-2014-9037 |
| 68274 | WordPress Hash autenticación débil | 287 | No probado | Arreglo oficial | CVE-2014-9037 |