Vulnerability · Published Nov 30, 2022 · Assigned by VulDB
CVE-2022-4231Tribal Systems Zenario CMS Remember Me session fixiation
Medium 4.2
In plain English
A medium-severity session fixation in Zenario CMS from Tribal Systems. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Official description
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue affects some unknown processing of the component Remember Me Handler. The manipulation leads to session fixiation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214589 was assigned to this vulnerability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Packagist | tribalsystems/zenario | no fix listed | GHSA-6657-9743-4mc6 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Tribal Systems | Zenario CMS | 9.3.57595 |
Weakness: CWE-384 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N