CVE-2018-18380 : What You Need to Know

Bigtree before version 4.2.24 has a vulnerability known as Session Fixation, allowing attackers to seize control of an admin session.

Understanding CVE-2018-18380

Bigtree CMS version 4.2.24 and earlier are affected by a Session Fixation vulnerability that could be exploited by attackers.

What is CVE-2018-18380?

This vulnerability exists in the admin.php file of Bigtree CMS, where it accepts a user-provided PHP session ID instead of generating a new one after a successful login, potentially enabling unauthorized access.

The Impact of CVE-2018-18380

Exploiting this Session Fixation vulnerability could allow malicious actors to hijack admin sessions, gaining unauthorized control over the application.

Technical Details of CVE-2018-18380

Bigtree CMS version 4.2.24 and earlier are susceptible to this security issue.

Vulnerability Description

The vulnerability in admin.php allows the acceptance of user-provided PHP session IDs, creating a risk of session hijacking.

Affected Systems and Versions

Product: Bigtree CMS
Vendor: Bigtree
Versions affected: Before 4.2.24

Exploitation Mechanism

Attackers can exploit this vulnerability by manipulating session IDs, potentially leading to unauthorized access and control of admin sessions.

Mitigation and Prevention

To address CVE-2018-18380, immediate actions and long-term security practices are recommended.

Immediate Steps to Take

Upgrade to Bigtree CMS version 4.2.24 or later to mitigate the vulnerability.
Monitor admin sessions for any suspicious activities.

Long-Term Security Practices

Implement strong session management practices.
Regularly audit and review session handling mechanisms.

Patching and Updates

Apply security patches and updates provided by Bigtree CMS to fix the Session Fixation vulnerability.