CVE-2012-0320: High severity six apart movable type vulnerability
Published Mar 3, 2012
·Updated
Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.
Affected Software
87 affected components
Sixapart Movable Type<=4.37
Sixapart Movable Type=4.28
Sixapart Movable Type=4.29
Sixapart Movable Type=4.36
Sixapart Movable Type=4.291
Sixapart Movable Type=4.292
Sixapart Movable Type=4.361
Sixapart Movable Type=5.0
Sixapart Movable Type=5.01
Sixapart Movable Type=5.1
Sixapart Movable Type=5.02
Sixapart Movable Type=5.04
Sixapart Movable Type=5.05
Sixapart Movable Type=5.06
Sixapart Movable Type=5.11
Sixapart Movable Type=5.12
Sixapart Movable Type=5.051
Sixapart Movable Type<=4.292
Sixapart Movable Type=4.28
Sixapart Movable Type=4.29
Sixapart Movable Type=4.291
Sixapart Movable Type=5.1
Sixapart Movable Type=5.02
Sixapart Movable Type=5.04
Sixapart Movable Type=5.05
Sixapart Movable Type=5.06
Sixapart Movable Type=5.11
Sixapart Movable Type=5.12
Sixapart Movable Type=5.051
Sixapart Movable Type=4.0
Sixapart Movable Type=4.0-beta
Sixapart Movable Type=4.0-beta2
Sixapart Movable Type=4.0-beta3
Sixapart Movable Type=4.0-beta4
Sixapart Movable Type=4.0-beta5
Sixapart Movable Type=4.0-beta6
Sixapart Movable Type=4.0-beta7
Sixapart Movable Type=4.0-rc1
Sixapart Movable Type=4.0-rc2
Sixapart Movable Type=4.0-rc3
Sixapart Movable Type=4.1-beta
Sixapart Movable Type=4.1-beta2
Sixapart Movable Type=4.1-rc1
Sixapart Movable Type=4.2
Sixapart Movable Type=4.2-rc2
Sixapart Movable Type=4.2-rc4
Sixapart Movable Type=4.2-rc5
Sixapart Movable Type=4.12
Sixapart Movable Type=4.15-beta1
Sixapart Movable Type=4.15-beta3
Sixapart Movable Type=4.15-beta4
Sixapart Movable Type=4.22
Sixapart Movable Type=4.23
Sixapart Movable Type=4.24
Sixapart Movable Type=4.25
Sixapart Movable Type=4.26
Sixapart Movable Type=4.27
Sixapart Movable Type=4.28
Sixapart Movable Type=4.29
Sixapart Movable Type=4.35
Sixapart Movable Type=4.36
Sixapart Movable Type=4.37
Sixapart Movable Type=4.261
Sixapart Movable Type=4.291
Sixapart Movable Type=4.292
Sixapart Movable Type=4.361
Sixapart Movable Type=5.0
Sixapart Movable Type=5.0-beta1
Sixapart Movable Type=5.0-beta2
Sixapart Movable Type=5.0-beta3
Sixapart Movable Type=5.0-beta4
Sixapart Movable Type=5.0-rc1
Sixapart Movable Type=5.0-rc2
Sixapart Movable Type=5.0-rc3
Sixapart Movable Type=5.01
Sixapart Movable Type=5.1-beta
Sixapart Movable Type=5.1-rc1
Sixapart Movable Type=5.02
Sixapart Movable Type=5.03
Sixapart Movable Type=5.04
Sixapart Movable Type=5.05
Sixapart Movable Type=5.06
Sixapart Movable Type=5.07
Sixapart Movable Type=5.11
Sixapart Movable Type=5.12
Sixapart Movable Type=5.031
Sixapart Movable Type=5.051
Remediation
Event History
Mar 3, 2012
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0320?
CVE-2012-0320 is considered a critical vulnerability that allows remote attackers to take control of sessions.
2
How do I fix CVE-2012-0320?
To fix CVE-2012-0320, upgrade Movable Type to versions 4.38, 5.07, or later.
3
What versions of Movable Type are affected by CVE-2012-0320?
Movable Type versions prior to 4.38, 5.0x before 5.07, and 5.1x before 5.13 are affected by CVE-2012-0320.
4
What type of vulnerability is CVE-2012-0320?
CVE-2012-0320 is a session management vulnerability related to the commenting feature and community script.
5
Can CVE-2012-0320 lead to data breaches?
Yes, CVE-2012-0320 can potentially lead to unauthorized access and control over user sessions, resulting in data breaches.