high7.5
CVE-2012-6078
W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.
Impact
W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Boldgrid | W3 Total Cache | before 0.9.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2012/12/30/3
- https://security-tracker.debian.org/tracker/CVE-2012-6078
- https://www.acunetix.com/vulnerabilities/web/wordpress-w3-total-cache-plugin-predictable-cache-filenames/
- https://www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/
- http://www.openwall.com/lists/oss-security/2012/12/30/3
- https://security-tracker.debian.org/tracker/CVE-2012-6078
- https://www.acunetix.com/vulnerabilities/web/wordpress-w3-total-cache-plugin-predictable-cache-filenames/
- https://www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/