CVE-2017-1000046: High severity mautic vulnerability
Published Jul 13, 2017
·Updated
Mautic 2.6.1 and earlier fails to set flags on session cookies
Other sources
Mautic prior to 2.1.1 fails to set flags on session cookies
— GitHub
Affected Software
2 affected componentsFixes available
composer/mautic/core<2.1.1
2.1.1
Mautic Mautic<=2.6.1
Event History
Jul 13, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
May 13, 2022
Advisory Published
via GitHub·01:40 AM
Frequently Asked Questions
1
What is the severity of CVE-2017-1000046?
CVE-2017-1000046 has a medium severity rating due to its potential for session hijacking.
2
How do I fix CVE-2017-1000046?
To fix CVE-2017-1000046, upgrade Mautic to version 2.1.1 or later.
3
What versions are affected by CVE-2017-1000046?
CVE-2017-1000046 affects Mautic versions 2.6.1 and earlier.
4
What does CVE-2017-1000046 vulnerability involve?
CVE-2017-1000046 involves failure to set security flags on session cookies in Mautic.
5
Is it necessary to patch CVE-2017-1000046?
Yes, it is necessary to patch CVE-2017-1000046 to protect against session hijacking risks.