Skip to content

CVE-2016-4793 CakePHP allows remote attackers to spoof their IP

HighCVSS 7.5 EPSS 5.1% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.

Affected products

ProductAffected versionsFixed in
cakephp/cakephp(Packagist) >= 1.2.0, < 2.6.13 2.6.13
cakephp/cakephp(Packagist) = 2.4.10 No fix listed
cakephp/cakephp(Packagist) = 2.4.5 No fix listed
cakephp/cakephp(Packagist) = 2.4.6 No fix listed
cakephp/cakephp(Packagist) = 2.4.7 No fix listed
cakephp/cakephp(Packagist) = 2.4.8 No fix listed
cakephp/cakephp(Packagist) = 2.4.9 No fix listed
cakephp/cakephp(Packagist) = 2.5.0 No fix listed
cakephp/cakephp(Packagist) = 2.5.0-RC1 No fix listed
cakephp/cakephp(Packagist) = 2.5.0-RC2 No fix listed
cakephp/cakephp(Packagist) = 2.5.0-beta No fix listed
cakephp/cakephp(Packagist) = 2.5.1 No fix listed
cakephp/cakephp(Packagist) = 2.5.2 No fix listed
cakephp/cakephp(Packagist) = 2.5.3 No fix listed
cakephp/cakephp(Packagist) = 2.5.4 No fix listed
cakephp/cakephp(Packagist) = 2.5.5 No fix listed
cakephp/cakephp(Packagist) = 2.5.6 No fix listed
cakephp/cakephp(Packagist) = 2.5.7 No fix listed
cakephp/cakephp(Packagist) = 2.5.8 No fix listed
cakephp/cakephp(Packagist) = 2.5.9 No fix listed
cakephp/cakephp(Packagist) = 2.6.0 No fix listed
cakephp/cakephp(Packagist) = 2.6.0-RC1 No fix listed
cakephp/cakephp(Packagist) = 2.6.0-beta No fix listed
cakephp/cakephp(Packagist) = 2.6.1 No fix listed
cakephp/cakephp(Packagist) = 2.6.10 No fix listed
Show 70 more
ProductAffected versionsFixed in
cakephp/cakephp(Packagist) = 2.6.11 No fix listed
cakephp/cakephp(Packagist) = 2.6.12 No fix listed
cakephp/cakephp(Packagist) = 2.6.2 No fix listed
cakephp/cakephp(Packagist) = 2.6.3 No fix listed
cakephp/cakephp(Packagist) = 2.6.4 No fix listed
cakephp/cakephp(Packagist) = 2.6.5 No fix listed
cakephp/cakephp(Packagist) = 2.6.6 No fix listed
cakephp/cakephp(Packagist) = 2.6.7 No fix listed
cakephp/cakephp(Packagist) = 2.6.8 No fix listed
cakephp/cakephp(Packagist) = 2.6.9 No fix listed
cakephp/cakephp(Packagist) >= 2.7.0-rc1, < 2.7.11 2.7.11
cakephp/cakephp(Packagist) = 2.7.0 No fix listed
cakephp/cakephp(Packagist) = 2.7.1 No fix listed
cakephp/cakephp(Packagist) = 2.7.10 No fix listed
cakephp/cakephp(Packagist) = 2.7.2 No fix listed
cakephp/cakephp(Packagist) = 2.7.3 No fix listed
cakephp/cakephp(Packagist) = 2.7.4 No fix listed
cakephp/cakephp(Packagist) = 2.7.5 No fix listed
cakephp/cakephp(Packagist) = 2.7.6 No fix listed
cakephp/cakephp(Packagist) = 2.7.7 No fix listed
cakephp/cakephp(Packagist) = 2.7.8 No fix listed
cakephp/cakephp(Packagist) = 2.7.9 No fix listed
cakephp/cakephp(Packagist) >= 2.8.0-rc1, < 2.8.2 2.8.2
cakephp/cakephp(Packagist) = 2.8.0 No fix listed
cakephp/cakephp(Packagist) = 2.8.0-RC1 No fix listed
cakephp/cakephp(Packagist) = 2.8.1 No fix listed
cakephp/cakephp(Packagist) >= 3.0.0-rc1, < 3.0.17 3.0.17
cakephp/cakephp(Packagist) = 3.0.0 No fix listed
cakephp/cakephp(Packagist) = 3.0.0-RC1 No fix listed
cakephp/cakephp(Packagist) = 3.0.0-RC2 No fix listed
cakephp/cakephp(Packagist) = 3.0.1 No fix listed
cakephp/cakephp(Packagist) = 3.0.10 No fix listed
cakephp/cakephp(Packagist) = 3.0.11 No fix listed
cakephp/cakephp(Packagist) = 3.0.12 No fix listed
cakephp/cakephp(Packagist) = 3.0.13 No fix listed
cakephp/cakephp(Packagist) = 3.0.14 No fix listed
cakephp/cakephp(Packagist) = 3.0.15 No fix listed
cakephp/cakephp(Packagist) = 3.0.16 No fix listed
cakephp/cakephp(Packagist) = 3.0.2 No fix listed
cakephp/cakephp(Packagist) = 3.0.3 No fix listed
cakephp/cakephp(Packagist) = 3.0.4 No fix listed
cakephp/cakephp(Packagist) = 3.0.5 No fix listed
cakephp/cakephp(Packagist) = 3.0.6 No fix listed
cakephp/cakephp(Packagist) = 3.0.7 No fix listed
cakephp/cakephp(Packagist) = 3.0.8 No fix listed
cakephp/cakephp(Packagist) = 3.0.9 No fix listed
cakephp/cakephp(Packagist) >= 3.1.0-beta1, < 3.1.12 3.1.12
cakephp/cakephp(Packagist) = 3.1.0 No fix listed
cakephp/cakephp(Packagist) = 3.1.0-RC1 No fix listed
cakephp/cakephp(Packagist) = 3.1.0-beta2 No fix listed
cakephp/cakephp(Packagist) = 3.1.1 No fix listed
cakephp/cakephp(Packagist) = 3.1.10 No fix listed
cakephp/cakephp(Packagist) = 3.1.11 No fix listed
cakephp/cakephp(Packagist) = 3.1.2 No fix listed
cakephp/cakephp(Packagist) = 3.1.3 No fix listed
cakephp/cakephp(Packagist) = 3.1.4 No fix listed
cakephp/cakephp(Packagist) = 3.1.5 No fix listed
cakephp/cakephp(Packagist) = 3.1.6 No fix listed
cakephp/cakephp(Packagist) = 3.1.7 No fix listed
cakephp/cakephp(Packagist) = 3.1.8 No fix listed
cakephp/cakephp(Packagist) = 3.1.9 No fix listed
cakephp/cakephp(Packagist) >= 3.2.0-rc1, < 3.2.5 3.2.5
cakephp/cakephp(Packagist) = 3.2.0 No fix listed
cakephp/cakephp(Packagist) = 3.2.0-RC1 No fix listed
cakephp/cakephp(Packagist) = 3.2.1 No fix listed
cakephp/cakephp(Packagist) = 3.2.2 No fix listed
cakephp/cakephp(Packagist) = 3.2.3 No fix listed
cakephp/cakephp(Packagist) = 3.2.4 No fix listed
debian/cakephp(Debian:11) < 2.8.3-1 2.8.3-1
cakephp/cakephp <= 3.2.4 No fix listed

References