CVE-2019-15955

An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to obtain the random values inside it. If an attacker can discover a session cookie owned by an admin, then it is possible to brute force it with O(n)=2n instead of O(n)=n^x complexity, and steal the admin password.

CVSS v3.0

6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

0.87% chance of exploitation in the next 30 days, 56th percentile

Published

2019-09-05

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://seclists.org/fulldisclosure/2019/Sep/3

References

• CVE Record
• NVD entry

Related

• CVE-2019-15954
• CVE-2019-15961
• CVE-2019-15950
• CVE-2019-15972
• CVE-2019-15949
• CVE-2019-15975