W3 Total Cache <= 0.9.2.4 - Password Hash Extraction
2020-09-22 00:00
AnonymousStrategic Overview
StatusPatched in 0.9.2.5
Affected PluginW3 Total Cache
Affected Version
<= 0.9.2.4CVSS7.5High
CVE
CVE-2012-6077Vulnerability Overview
W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.
Technical Analysis
REMEDIATION: Update to version 0.9.2.5, or a newer patched version --- IDENTIFIER: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C