CVE-2020-12467: Medium severity subrion vulnerability
Published Apr 29, 2020
·Updated
Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.
Affected Software
1 affected component
Intelliants Subrion=4.2.1
Event History
Apr 29, 2020
CVE Published
via MITRE·07:58 PM
Data Sourced
via MITRE·07:58 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for Subrion CMS 4.2.1?
The vulnerability ID for Subrion CMS 4.2.1 is CVE-2020-12467.
2
What is the severity of CVE-2020-12467?
The severity of CVE-2020-12467 is medium, with a severity value of 6.5.
3
How does Subrion CMS 4.2.1 allow session fixation?
Subrion CMS 4.2.1 allows session fixation by accepting an alphanumeric value in a session cookie.
4
What is the affected software version of CVE-2020-12467?
The affected software version of CVE-2020-12467 is Subrion CMS 4.2.1.
5
Is there a fix available for CVE-2020-12467?
There is no specific fix mentioned in the provided reference. It is recommended to follow the best security practices and update to the latest version of Subrion CMS to mitigate the session fixation vulnerability.