CVE-2011-0398

The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to…

Medium6.4EPSS 1.3%

Published: 10 Jan 2011
Updated: 6 Aug 2024
Reserved: 10 Jan 2011
Assigned by: mitre

Description

The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via (1) use of a private (aka RFC 1918) address behind a proxy server or (2) spoofing of the X-Forwarded-For HTTP header.

Timeline

2011
10 Jan 2011
10 Jan 2011
ID reserved
By mitre
10 Jan 2011
10 Jan 2011
Published
2024
6 Aug 202414 years later
6 Aug 2024· 14 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2011-0398, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	Medium6.4	AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS (exploitation in 30 days): 1.3% · top 29% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.4.

Weakness

Affected products

n/a
- affected n/a

References (5)

45787 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
70384 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
http://dev.piwik.org/trac/ticket/567 (opens in a new tab)x_refsource_CONFIRMx_transferred
piwik-piwikcommongetip-security-bypass(64641) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
http://piwik.org/blog/2011/01/piwik-1-1-2/ (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2011-0398](https://cveledger.app/badge/CVE-2011-0398.svg)](https://cveledger.app/cve/CVE-2011-0398)

Record last updated 6 Aug 2024, 21:51 UTC.