CVE-2012-6079

Published: Nov 22, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.

Affected (1)

Products: Boldgrid: W3 Total Cache

Boldgrid

1 product

W3 Total Cache

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Boldgrid W3 Total Cache	Before 0.9.2.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

http://www.openwall.com/lists/oss-security/2012/12/30/3

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2012-6079

Source: secalert@redhat.com

Third Party Advisory

https://www.acunetix.com/vulnerabilities/web/wordpress-w3-total-cache-plugin-predictable-cache-filenames/

Source: secalert@redhat.com

Third Party Advisory

https://www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/

Source: secalert@redhat.com

Release NotesVendor Advisory

http://www.openwall.com/lists/oss-security/2012/12/30/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2012-6079

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.acunetix.com/vulnerabilities/web/wordpress-w3-total-cache-plugin-predictable-cache-filenames/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.