CVE-2017-8081

Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an…

published April 30, 2017

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks via calculation of a session cookie or CSRF nonce.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01261 · 69.4th percentile
Published
2017-04-30T19:00Z
EPSS history
Timeline
  • 30 APR 19:00Z
    Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an…
    cvelistv5