CVE-2016-6332

CVSS 3.0: 7.5 high
EPSS: 2%p74
Published: Apr 20, 2017 · Apr 20, 2017
Modified: Jun 17, 2026

Analyze CVE-2016-6332 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive information by leveraging failure to terminate sessions when a user account is blocked.

Vendors: mediawiki

Products: mediawiki

Weakness: CWE-200

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news

1 story

The Old and New: Current Trends in Web

Palo Alto Unit 42Nov 5, 09:43 UTC · Nov 5, 2018VulnerabilityCVE-2014-6332 CVE-2016-0189 CVE-2015-5122+42 · 1 read