PT-2026-103815 · Ghost · Ghost
CVSS v4.0
8.6
عالية
| المتجه | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Ghost versions 6.20.0 through 6.57.0
Description
Improper session management allows authenticated staff users to log in as any other staff user using only a password, which bypasses two-factor authentication. This enables attackers with valid staff credentials to impersonate other staff members and gain unauthorized access to administrative functions.
Recommendations
Update Ghost to version 6.57.1 or later.
استغلال
إصلاح
Insufficient Session Expiration
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Ghost