CVE-2014-2341: Medium severity Cubecart CubeCart vulnerability
Published Apr 21, 2014
·Updated
Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.
Affected Software
9 affected components
Cubecart CubeCart<=5.2.8
Cubecart CubeCart=5.2.0
Cubecart CubeCart=5.2.1
Cubecart CubeCart=5.2.2
Cubecart CubeCart=5.2.3
Cubecart CubeCart=5.2.4
Cubecart CubeCart=5.2.5
Cubecart CubeCart=5.2.6
Cubecart CubeCart=5.2.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CubeCartto a version that resolves this vulnerability.Fixed in 5.2.9
Event History
Apr 21, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Apr 22, 2014
Data Sourced
via NVD·01:06 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2341?
CVE-2014-2341 is classified as a high severity vulnerability due to its potential to allow session hijacking.
2
How do I fix CVE-2014-2341?
To fix CVE-2014-2341, upgrade to CubeCart version 5.2.9 or later.
3
Which versions of CubeCart are affected by CVE-2014-2341?
CVE-2014-2341 affects all CubeCart versions prior to 5.2.9.
4
Can CVE-2014-2341 lead to unauthorized access?
Yes, CVE-2014-2341 can allow remote attackers to hijack web sessions, leading to unauthorized access.
5
Is CVE-2014-2341 a common vulnerability?
CVE-2014-2341 is notable among session fixation vulnerabilities, which can be common in web applications.