CVE-2012-5868

WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to…

published December 27, 2012

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02723 · 85.9th percentile
Published
2012-12-27T11:00Z
EPSS history
Timeline
  • 27 DEC 11:00Z
    WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to…
    cvelistv5