Check Point Advisories

W3-Total-Cache Wordpress-plugin Username and Hash Extract (CVE-2012-6077)

Check Point Reference: CPAI-2013-3508
Date Published: 26 Nov 2013
Severity: Medium
Last Updated:
Source: CVE-2012-6077
Protection Provided by:

Security Gateway
R75

Who is Vulnerable? W3 Total Cache Plugin for Wordpress
Vulnerability Description An information disclosure vulnerability has been reported in W3 Total Cache Plugin for Wordpress.
Vulnerability DetailsThe vulnerability is due to the storage location of the database cache files. A remote attacker could trigger this flaw by sending a direct request for a cache file. Successful exploitation may result in the disclosure of sensitive password hash information.

Protection Overview

This protection will detect and block attempts to exploit this vulnerability.

Security Gateway R75 / R71 / R70

  1. In the IPS tab, click Protections and find the W3-Total-Cache Wordpress-plugin Username and Hash Extract protection using the Search tool and Edit the protection's settings.
  2. Install policy on all modules.

SmartView Tracker will log the following entries:
Attack Name: DNS Enforcement Violation
Attack Information: W3-Total-Cache Wordpress-plugin Username and Hash Extract

This website uses cookies to ensure you get the best experience. Got it, Thanks! MORE INFO