CWE Code: 338
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Summary: poor cryptographic salt initialization in admin/inc/template_functions.php in getsimple cms 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct csrf attacks via calculation of a session cookie or csrf nonce.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-04-30
Last Modified Date: 2019-10-03