Session Cookie Vulnerability in WordPress: CVE-2012-5868
Summary
DEBIAN-CVE-2012-5868: WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modi... Affects wordpress versions 5.7.1+dfsg1-2 – 6.8.1+dfsg1-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
WordPress is a widely-used open-source content management system (CMS) that allows users to create and manage websites easily. It offers a range of features including themes, plugins, and user management. However, certain versions of WordPress have been found to have vulnerabilities that can be exploited by attackers. Specifically, CVE-2012-5868 affects WordPress versions prior to 3.4.3, where the session cookie is not invalidated upon an administrator's logout, posing a security risk.
Vulnerability Detail
The vulnerability identified as CVE-2012-5868 arises from WordPress 3.4.2 failing to invalidate the 'wordpress_sec' session cookie when an administrator logs out. This oversight allows remote attackers to exploit valid session identifiers through brute-force attacks or replay attacks, potentially leading to unauthorized access and data modification. The vulnerability is significant as it compromises the integrity and confidentiality of the administrator's session.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, administrators can manually clear the browser cookies related to the WordPress session after logging out. This can be done by accessing the browser settings and deleting cookies associated with the website.
Conclusion
CVE-2012-5868 is a critical vulnerability in WordPress that can lead to unauthorized access due to session cookies not being invalidated upon logout. It is essential for users to update their WordPress installations to mitigate this risk and ensure the security of their websites.
See every vulnerability recorded for wordpress →
FAQ
CVE-2012-5868 is a vulnerability in WordPress that allows session cookies to remain valid after an administrator logs out, which can be exploited by attackers.
WordPress versions prior to 3.4.3 are affected by this vulnerability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected without any signup.
The risks include unauthorized access to the administrator's session, potential data modification, and the ability for attackers to perform actions on behalf of the administrator.
Yes, updating to WordPress version 3.4.3 or later will resolve this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for wordpress.
