Description

Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.

Remediation

References

CVE-2007-6013

Related Vulnerabilities

Plone CMS Improper Input Validation Vulnerability (CVE-2013-4192)

Moodle Improper Following of Specification by Caller Vulnerability (CVE-2019-14829)

osTicket Other Vulnerability (CVE-2006-5407)

WordPress Plugin YITH WooCommerce Points and Rewards Security Bypass (1.3.4)

WordPress Plugin WP User Frontend-Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Arbitrary File Upload (2.3.10)

Severity

Critical

Classification

CVE-2007-6013 CWE-327 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities