Vulnerability in Joomla Joomla\!

CVE-2008-4122

Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

EPSS: 0.013 (66.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
  • cve@mitre.org (Third Party Advisory, x_refsource_SREASON, third-party-advisory)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
  • cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2008-4122?
CVE-2008-4122 is a high-severity vulnerability in Joomla Joomla\!, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.5/10. Published 2008-12-19.
How severe is CVE-2008-4122?
High severity. CVSS v3 base score is 7.5 out of 10.