CVE-2008-4122: High severity joomla vulnerability
Published Dec 19, 2008
·Updated
Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Affected Software
2 affected components
Joomla Joomla\!=1.5.8
Joomla joomla=1.5.8
Event History
Dec 19, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-4122?
CVE-2008-4122 is considered a high severity vulnerability due to the risk of session hijacking.
2
How do I fix CVE-2008-4122?
To fix CVE-2008-4122, ensure that the Joomla! session cookie is configured to use the secure flag for HTTPS connections.
3
What versions of Joomla! are affected by CVE-2008-4122?
Joomla! version 1.5.8 is affected by CVE-2008-4122.
4
What type of attack does CVE-2008-4122 facilitate?
CVE-2008-4122 facilitates session hijacking attacks by allowing remote attackers to capture session cookies.
5
Is there a workaround for CVE-2008-4122?
A potential workaround for CVE-2008-4122 is to manually configure your server to enforce secure connections for all sessions.