CVE-2020-23178: Medium severity jenkins vulnerability
Published Jul 2, 2021
·Updated
An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out, allowing for an attacker to perform a session replay attack and impersonate the victim user.
Affected Software
1 affected component
PHP-Fusion php-fusion=9.03.50
Event History
Jul 2, 2021
CVE Published
via MITRE·05:51 PM
Data Sourced
via MITRE·05:51 PM
Description
Frequently Asked Questions
1
What is CVE-2020-23178?
CVE-2020-23178 is a vulnerability in PHP-Fusion 9.03.50 that allows for a session replay attack and impersonation of the user.
2
How severe is CVE-2020-23178?
CVE-2020-23178 has a severity rating of 5.4 (medium).
3
What is the affected software?
PHP-Fusion version 9.03.50 is the affected software.
4
How can an attacker exploit this vulnerability?
An attacker can exploit CVE-2020-23178 by performing a session replay attack after a user logs out, allowing them to impersonate the victim user.
5
Is there a fix available for CVE-2020-23178?
At the moment, there is no specific fix available for CVE-2020-23178. It is recommended to update to a patched version or apply security measures to mitigate the risk.