CVE-2012-5395: Medium severity MediaWiki MediaWiki vulnerability
Published Jun 2, 2014
·Updated
Session fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the centralauthSession cookie.
Affected Software
15 affected components
MediaWiki MediaWiki=1.20
MediaWiki MediaWiki=1.19
MediaWiki MediaWiki=1.19-beta_1
MediaWiki MediaWiki=1.19-beta_2
MediaWiki MediaWiki=1.19.1
MediaWiki MediaWiki=1.19.2
MediaWiki MediaWiki<=1.18.5
MediaWiki MediaWiki=1.18
MediaWiki MediaWiki=1.18-beta_1
MediaWiki MediaWiki=1.18.0
MediaWiki MediaWiki=1.18.0-rc1
MediaWiki MediaWiki=1.18.1
MediaWiki MediaWiki=1.18.2
MediaWiki MediaWiki=1.18.3
MediaWiki MediaWiki=1.18.4
Event History
Jun 2, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-5395?
CVE-2012-5395 is classified as a medium severity vulnerability.
2
How do I fix CVE-2012-5395?
To fix CVE-2012-5395, update MediaWiki to version 1.18.6, 1.19.3, or 1.20.1 or later.
3
What systems are affected by CVE-2012-5395?
CVE-2012-5395 affects MediaWiki versions prior to 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1.
4
What type of vulnerability is CVE-2012-5395?
CVE-2012-5395 is a session fixation vulnerability that can allow remote session hijacking.
5
What is the impact of CVE-2012-5395?
The impact of CVE-2012-5395 is that an attacker can hijack user sessions through manipulation of the centralauth_Session cookie.