First published: Wed Aug 08 2007(Updated: )
Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mambo Open Source | =4.6.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-4203 is considered a medium severity vulnerability due to its impact on session management.
To fix CVE-2007-4203, update Mambo CMS to a version that addresses this issue, preferably a version higher than 4.6.2.
Mambo Open Source CMS version 4.6.2 is directly affected by CVE-2007-4203.
CVE-2007-4203 is a session fixation vulnerability that allows attackers to hijack user sessions.
Yes, CVE-2007-4203 can be exploited remotely by attackers to take over user sessions.