CVE-2012-1840: High severity AjaXplorer AjaXplorer vulnerability
Published Mar 22, 2012
·Updated
AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by leveraging knowledge of a password hash.
Affected Software
9 affected components
AjaXplorer AjaXplorer=3.2
AjaXplorer AjaXplorer=3.2.1
AjaXplorer AjaXplorer=3.2.2
AjaXplorer AjaXplorer=3.2.3
AjaXplorer AjaXplorer=3.2.4
AjaXplorer AjaXplorer=4.0
AjaXplorer AjaXplorer=4.0.1
AjaXplorer AjaXplorer=4.0.2
AjaXplorer AjaXplorer=4.0.3
Remediation
Patch Available
Event History
Mar 22, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1840?
CVE-2012-1840 has a CVSS score indicating a medium severity level due to its potential for unauthorized remote access.
2
How do I fix CVE-2012-1840?
To fix CVE-2012-1840, update AjaXplorer to version 3.2.5 or 4.0.4 or later.
3
What versions of AjaXplorer are affected by CVE-2012-1840?
CVE-2012-1840 affects AjaXplorer versions 3.2.x up to 3.2.4 and 4.0.x up to 4.0.3.
4
What type of vulnerability is CVE-2012-1840 classified as?
CVE-2012-1840 is classified as a cookie authentication vulnerability allowing remote attackers to gain unauthorized access.
5
What should organizations do to mitigate risks from CVE-2012-1840?
Organizations should immediately update their AjaXplorer installations to the latest version to mitigate risks associated with CVE-2012-1840.