CVE-2020-12467
First published: Wed Apr 29 2020(Updated: )
Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intelliants Subrion | =4.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Subrion CMS 4.2.1?
The vulnerability ID for Subrion CMS 4.2.1 is CVE-2020-12467.
What is the severity of CVE-2020-12467?
The severity of CVE-2020-12467 is medium, with a severity value of 6.5.
How does Subrion CMS 4.2.1 allow session fixation?
Subrion CMS 4.2.1 allows session fixation by accepting an alphanumeric value in a session cookie.
What is the affected software version of CVE-2020-12467?
The affected software version of CVE-2020-12467 is Subrion CMS 4.2.1.
Is there a fix available for CVE-2020-12467?
There is no specific fix mentioned in the provided reference. It is recommended to follow the best security practices and update to the latest version of Subrion CMS to mitigate the session fixation vulnerability.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/event
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intelliants
- canonical/intelliants subrion
- version/intelliants subrion/4.2.1