W3 Total Cache <= 0.9.2.4 - Insecure Cryptography to Sensitive Information Disclosure
2020-09-22 00:00
AnonymousStrategic Overview
StatusPatched in 0.9.2.5
Affected PluginW3 Total Cache
Affected Version
<= 0.9.2.4CVSS7.5High
CVE
CVE-2012-6078Vulnerability Overview
W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.
Technical Analysis
REMEDIATION: Update to version 0.9.2.5, or a newer patched version --- IDENTIFIER: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C