CVEvulnerability

CVE-2010-1434

7.5 HIGH Published 2021-06-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2021-06-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-384

Description

Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain access to sensitive information, which may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable.

Affected configurations

• joomla joomla\! (>= 1.5.0 <= 1.5.15)

Related

Weakness · CWE (1)

  • CWE-384 Session Fixation weakness

References