CVE-2018-0564: High severity ec-cube vulnerability
Session fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3..4, EC-CUBE 3.0.5, EC-CUBE 3.0.6, EC-CUBE 3.0.7, EC-CUBE 3.0.8, EC-CUBE 3.0.9, EC-CUBE 3.0.10, EC-CUBE 3.0.11, EC-CUBE 3.0.12, EC-CUBE 3.0.12-p1, EC-CUBE 3.0.13, EC-CUBE 3.0.14, EC-CUBE 3.0.15) allows remote attackers to perform arbitrary operations via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0564?
The severity of CVE-2018-0564 is classified as medium.
How do I fix CVE-2018-0564?
To fix CVE-2018-0564, upgrade to EC-CUBE version 3.0.15 or later.
What is the impact of CVE-2018-0564?
The impact of CVE-2018-0564 is that it allows an attacker to exploit session fixation vulnerabilities.
Which versions of EC-CUBE are affected by CVE-2018-0564?
EC-CUBE versions from 3.0.0 to 3.0.14 are affected by CVE-2018-0564.
Is CVE-2018-0564 a remote code execution vulnerability?
No, CVE-2018-0564 is not a remote code execution vulnerability, it is a session fixation vulnerability.