VDB
CVE-2010-1136
CVE-2010-1136
PUBLISHED
CVSS 7.5 HIGH
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
EPSS 1.66% · 76.4th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
1.66%
76.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| tiki | tikiwiki_cms\/groupware | 3.0, 3.2, 3.3 |
Timeline
- Mar 26, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
- Sep 14, 2023 EPSS Score
References
- http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25196 url
- 38608 vdb
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56771 technical
- http://osvdb.org/62801 technical
- http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/proposals/3.x/lib/userslib.php?r1=25196&r2=25195&pathrev=25196 technical
- https://nvd.nist.gov/vuln/detail/CVE-2010-1136 advisory
- http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases url
- http://secunia.com/advisories/38882 url