CVE-2013-2313: Medium severity LOCKON EC-CUBE vulnerability
Published May 29, 2013
·Updated
Session fixation vulnerability in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to hijack web sessions via unspecified vectors.
Affected Software
13 affected components
LOCKON EC-CUBE=2.11.0
LOCKON EC-CUBE=2.11.1
LOCKON EC-CUBE=2.11.2
LOCKON EC-CUBE=2.11.3
LOCKON EC-CUBE=2.11.4
LOCKON EC-CUBE=2.11.5
LOCKON EC-CUBE=2.12.0
LOCKON EC-CUBE=2.12.1
LOCKON EC-CUBE=2.12.2
LOCKON EC-CUBE=2.12.3
LOCKON EC-CUBE=2.12.3en
LOCKON EC-CUBE=2.12.3enp1
LOCKON EC-CUBE=2.12.3enp2
Event History
May 29, 2013
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2313?
CVE-2013-2313 is considered a medium severity vulnerability due to its potential for session hijacking.
2
How do I fix CVE-2013-2313?
To fix CVE-2013-2313, upgrade LOCKON EC-CUBE to version 2.12.3enp2 or later.
3
Which versions of EC-CUBE are affected by CVE-2013-2313?
CVE-2013-2313 affects LOCKON EC-CUBE versions 2.11.0 through 2.12.3enP2.
4
What kind of attack can be executed using CVE-2013-2313?
CVE-2013-2313 allows attackers to hijack user sessions, potentially gaining unauthorized access.
5
Is it safe to continue using LOCKON EC-CUBE versions before 2.12.3enp2 after CVE-2013-2313?
No, it is not safe to use versions prior to 2.12.3enp2 as they are vulnerable to session fixation attacks.