p PatchFirst

CVE-2022-4231

CVE-2022-4231 · Tribal Systems Zenario CMS Remember Me session fixiation

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue affects some unknown processing of the component Remember Me Handler. The manipulation leads to session fixiation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214589 was assigned to this vulnerability.

CVSS 4.2 · Media · EPSS 0,5%

Publicación
Actualización

Pila tecnológica: php

Productos y versiones afectados

  • zenario cms

    Versiones
    • 9.3.57595: Afectada

    Sin corrección publicada

  • tribalsystems/zenario Packagist

    Versiones
    • 7.5.40440
    • 7.5.41006
    • 7.5.41499
    • 7.5.41633
    • 7.5.42085
    • 7.5.42990
    • 7.5.47180
    • 7.6.41504
    • 7.6.41633
    • 7.6.42085
    • 7.6.42990
    • 7.6.47180
    • 7.7.42682
    • 7.7.42963
    • 7.7.42990
    • 7.7.44223
    • 7.7.47180
    • 7.7.47369
    • 7.7.48583
    • 8.0.44237
    • 8.0.44273
    • 8.0.44294
    • 8.0.44521
    • 8.0.45032
    • 8.0.45250
    • 8.0.45529
    • 8.0.47180
    • 8.0.48583
    • 8.1.45530
    • 8.1.45698
    • 8.1.46089
    • 8.1.46433
    • 8.1.46615
    • 8.1.47180
    • 8.1.47369
    • 8.1.48583
    • 8.2.46436
    • 8.2.46614
    • 8.2.47180
    • 8.2.47369
    • 8.2.47992
    • 8.2.48583
    • 8.3.47997
    • 8.3.48583
    • 8.3.50564
    • 8.4.50565
    • 8.4.51340
    • 8.5.50567
    • 8.5.50837
    • 8.5.51340
    • 8.6.51342
    • 8.7
    • 8.8
    • 8.8.53370
    • 8.8.53725
    • 8.8.54063
    • 8.9.54063
    • 8.9.54149
    • 8.9.54153
    • 8.9.55141
    • 9.0.54156
    • 9.0.55141
    • 9.0.57473
    • 9.1.55143
    • 9.1.55510
    • 9.1.55619
    • 9.1.57473
    • 9.2
    • 9.2.55826
    • 9.2.57169
    • 9.2.57473
    • 9.3.57186
    • 9.3.57474
    • 9.3.57595
    Intervalos de versiones afectados
    • ECOSYSTEM: ≤ 9.3.57595

    Sin corrección publicada

Fuentes originales

Comprueba tu servidor →