CVE-2007-6013

moderate-risk
Published 2007-11-19

Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.

Do I need to act?

~
1.6% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (3)

Affected Vendors

Wordpress Fedoraproject

References (26)

Broken Link http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058576.html
Broken Link http://osvdb.org/40801
Broken Link http://secunia.com/advisories/27714
Broken Link http://secunia.com/advisories/28310
Broken Link http://securityreason.com/securityalert/3375
Exploit http://trac.wordpress.org/ticket/5367
Third Party Advisory http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-cookie-auth.txt
Broken Link http://www.securityfocus.com/archive/1/483927/100/0/threaded
Broken Link http://www.securitytracker.com/id?1018980
Broken Link http://www.vupen.com/english/advisories/2007/3941
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/38578
Mailing List https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00079.ht...
Mailing List https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00098.ht...
Broken Link http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058576.html
Broken Link http://osvdb.org/40801
Broken Link http://secunia.com/advisories/27714
Broken Link http://secunia.com/advisories/28310
Broken Link http://securityreason.com/securityalert/3375
Exploit http://trac.wordpress.org/ticket/5367
Third Party Advisory http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-cookie-auth.txt
and 6 more references
45
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 4/34 · Minimal
Exposure 9/34 · Low