CVE-2004-2243: High severity Phorum Phorum vulnerability
Published Dec 31, 2004
·Updated
Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorumuriauth parameter, as demonstrated using profile.php. NOTE: the affected version was reported to be 4.3.7, but this may be erroneous.
Affected Software
1 affected component
Phorum Phorum=4.3.7
Event History
Dec 31, 2004
CVE Published
05:00 AM
Jul 17, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2243?
CVE-2004-2243 is considered a high severity vulnerability due to its ability to allow session hijacking.
2
How do I fix CVE-2004-2243?
To fix CVE-2004-2243, update to a patched version of Phorum that addresses session management issues.
3
What software is affected by CVE-2004-2243?
Phorum version 4.3.7 is specifically affected by CVE-2004-2243.
4
Who can be impacted by CVE-2004-2243?
Users of the Phorum software can be impacted by CVE-2004-2243 if their session hashes are not properly secured.
5
What kind of attacks can CVE-2004-2243 lead to?
CVE-2004-2243 can lead to session hijacking attacks, allowing attackers to impersonate legitimate users.