CVE-2016-2564 in Community Suite정보

요약

\~에 의해 MITRE

Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the more_entropy flag. Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2016. 02. 25.

공개

2017. 04. 23.

모더레이션

수락

항목

VDB-100466

CPE

준비됨

CWE

CWE-331 (확인됨)

CVSS

5.9 (NVD)

EPSS

0.00305

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2016-2564
NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-2564
CVE Details	https://www.cvedetails.com/cve/CVE-2016-2564/

◂ 이전 개요 다음 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!