CVE-2012-0264
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OP5 Monitor和OP5 Appliance都是瑞典OP5公司的网络监控软件，用于监控企业IT网络的性能、应用的使用情况等。 OP5 Monitor和OP5 Appliance 5.5.0之前的版本中存在安全漏洞，该漏洞源于程序没有正确管理会话cookie。远程攻击者可利用该漏洞劫持用户会话。
Possible ATT&CK Techniques 2 AI
T1041 · Exfiltration Over C2 Channel T1598 · Phishing for Information
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2012-0264
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
OP5 Monitor和OP5 Appliance 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OP5 Monitor和OP5 Appliance都是瑞典OP5公司的网络监控软件，用于监控企业IT网络的性能、应用的使用情况等。 OP5 Monitor和OP5 Appliance 5.5.0之前的版本中存在安全漏洞，该漏洞源于程序没有正确管理会话cookie。远程攻击者可利用该漏洞劫持用户会话。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2012-0264
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2012-0264
请登录查看更多情报信息。
Vendor Advisories for CVE-2012-0264 (2)
Mailing List Discussions for CVE-2012-0264 (1)
-
🔗 Full Disclosure: OP5 Monitor - Multiple Vulnerabilities Read full article mailing-list x_refsource_FULLDISC
Other References for CVE-2012-0264 (3)
-
http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf x_refsource_MISC
-
https://bugs.op5.com/view.php?id=5094 x_refsource_CONFIRM
Same Patch Batch · n/a · 2013-12-31 · 12 CVEs total
| CVE-2012-0261 | OP5 Monitor和OP5 Appliance system-portal组件输入验证漏洞 | |
| CVE-2012-0262 | OP5 Monitor和OP5 Appliance system-op5config组件远程代码执行漏洞 | |
| CVE-2012-0263 | OP5 Monitor和OP5 Appliance 安全漏洞 | |
| CVE-2013-3572 | Ubiquiti Networks UniFi 跨站脚本漏洞 | |
| CVE-2013-3667 | Bare Bones Software Yojimbo/TextWrangler/BBEdit 安全漏洞 | |
| CVE-2013-5573 | CloudBees Jenkins ‘Descriotion’字段HTML注入漏洞 | |
| CVE-2013-6459 | will_paginate gem for Ruby 跨站脚本漏洞 | |
| CVE-2013-6987 | Synology DiskStation Manager ‘FileBrowser’组件目录遍历漏洞 | |
| CVE-2013-6983 | Cisco Unified Presence Server SQL注入漏洞 | |
| CVE-2013-7241 | Zenphoto 跨站脚本漏洞 | |
| CVE-2013-7242 | Zenphoto SQL注入漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2012-0264
No comments yet