Vulnerability Details : CVE-2022-4231
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue affects some unknown processing of the component Remember Me Handler. The manipulation leads to session fixiation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214589 was assigned to this vulnerability.
Products affected by CVE-2022-4231
- cpe:2.3:a:tribalsystems:zenario:9.3.57595:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-4231
0.07%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 30 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-4231
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.2
|
MEDIUM | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N |
1.6
|
2.5
|
VulDB | |
|
5.4
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
2.8
|
2.5
|
NIST |
CWE ids for CVE-2022-4231
-
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.Assigned by: cna@vuldb.com (Primary)
References for CVE-2022-4231
-
https://vuldb.com/?id.214589
CVE-2022-4231 | Tribal Systems Zenario CMS Remember Me session fixiationThird Party Advisory
-
https://github.com/lithonn/bug-report/tree/main/vendors/tribalsystems/zenario/session-fixation
bug-report/vendors/tribalsystems/zenario/session-fixation at main · lithonn/bug-report · GitHubExploit;Third Party Advisory
Jump to