The vulnerability of the sessions subsystem in the PHP programming language interpreter allows attackers to intercept user sessions.

🗓️ 27 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The PHP sessions subsystem vulnerability allows attackers to intercept user sessions due to privilege management errors.

Reporter	Title	Published	Views	Family All 64
Tenable Nessus	PHP 5.5.x < 5.5.2 Multiple Vulnerabilities	21 Aug 201300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php54 (ALAS-2013-224)	1 Oct 201300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-2438)	4 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : php (EulerOS-SA-2019-2546)	9 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : php (EulerOS-SA-2019-2649)	18 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747)	1 Jul 202000:00	–	nessus
Tenable Nessus	Fedora 19 : php-5.5.3-1.fc19 (2013-14998)	25 Aug 201300:00	–	nessus
Tenable Nessus	GLSA-201408-11 : PHP: Multiple vulnerabilities	30 Aug 201400:00	–	nessus
Tenable Nessus	Oracle Linux 8 : php:7.4 (ELSA-2023-2903)	24 May 202300:00	–	nessus
Tenable Nessus	PHP 5.5.x < 5.5.3 Multiple Vulnerabilities	21 Aug 201300:00	–	nessus

Vulners

Node

php_group phpMatch5.5.0alpha3

OR

php_group phpMatch5.5.0alpha4

OR

php_group phpMatch5.5.0rc1

OR

php_group phpMatch5.5.0rc2

OR

php_group phpMatch5.5.0beta1

OR

php_group phpMatch5.5.0beta2

OR

php_group phpMatch5.5.0alpha1

OR

php_group phpMatch5.5.0alpha2

OR

php_group phpMatch5.5.0beta3

OR

php_group phpMatch5.5.0beta4

OR

php_group phpMatch5.5.0alpha5

OR

php_group phpMatch5.5.0alpha6

OR

php_group phpMatch5.4.5

OR

php_group phpMatch5.4.4

OR

php_group phpMatch5.4.2

OR

php_group phpMatch5.4.13rc1

OR

php_group phpMatch5.4.13

OR

php_group phpMatch5.4.9

OR

php_group phpMatch5.4.8

OR

php_group phpMatch5.4.16rc1

OR

php_group phpMatch5.4.15rc1

OR

php_group phpMatch5.4.12

OR

php_group phpMatch5.4.11

OR

php_group phpMatch5.4.7

OR

php_group phpMatch5.4.6

OR

php_group phpMatch5.4.3

OR

php_group phpMatch5.4.14rc1

OR

php_group phpMatch5.4.14

OR

php_group phpMatch5.4.10

OR

php_group phpMatch5.4.1

OR

php_group phpMatch5.4.0

OR

php_group phpMatch5.4.12rc2

OR

php_group phpMatch5.4.12rc1

OR

php_group phpMatch5.3.6

OR

php_group phpMatch5.3.5

OR

php_group phpMatch5.2.10

OR

php_group phpMatch5.2.13

OR

php_group phpMatch5.2.4

OR

php_group phpMatch5.2.3

OR

php_group phpMatch5.1.1

OR

php_group phpMatch5.1.0

OR

php_group phpMatch5.1.6

OR

php_group phpMatch5.0.0beta4

OR

php_group phpMatch5.0.0beta3

OR

php_group phpMatch5.0.0beta1

OR

php_group phpMatch5.3.11

OR

php_group phpMatch5.3.4

OR

php_group phpMatch5.3.9

OR

php_group phpMatch5.3.2

OR

php_group phpMatch5.3.10

OR

php_group phpMatch5.2.5

OR

php_group phpMatch5.2.11

OR

php_group phpMatch5.2.14

OR

php_group phpMatch5.2.1

OR

php_group phpMatch5.1.4

OR

php_group phpMatch5.1.5

OR

php_group phpMatch5.0.0beta2

OR

php_group phpMatch5.0.2

OR

php_group phpMatch5.3.8

OR

php_group phpMatch5.3.1

OR

php_group phpMatch5.3.7

OR

php_group phpMatch5.3.12

OR

php_group phpMatch5.3.19

OR

php_group phpMatch5.3.18

OR

php_group phpMatch5.3.13

OR

php_group phpMatch5.3.15

OR

php_group phpMatch5.3.14

OR

php_group phpMatch5.3.20

OR

php_group phpMatch5.2.16

OR

php_group phpMatch5.0.0

OR

php_group phpMatch5.3.0

OR

php_group phpMatch5.2.12

OR

php_group phpMatch5.2.0

OR

php_group phpMatch5.2.7

OR

php_group phpMatch5.2.15

OR

php_group phpMatch5.3.3

OR

php_group phpMatch5.2.6

OR

php_group phpMatch5.2.9

OR

php_group phpMatch5.0.4

OR

php_group phpMatch5.0.3

OR

php_group phpMatch5.0.0rc1

OR

php_group phpMatch5.0.0rc2

OR

php_group phpMatch5.2.8

OR

php_group phpMatch5.2.2

OR

php_group phpMatch5.2.17

OR

php_group phpMatch5.1.3

OR

php_group phpMatch5.1.2

OR

php_group phpMatch5.0.5

OR

php_group phpMatch5.3.27

OR

php_group phpMatch5.3.26

OR

php_group phpMatch5.3.25

OR

php_group phpMatch5.3.24

OR

php_group phpMatch5.3.17

OR

php_group phpMatch5.3.16

OR

php_group phpMatch5.0.1

OR

php_group phpMatch5.0.0rc3

OR

php_group phpMatch5.3.22

OR

php_group phpMatch5.3.23

OR

php_group phpMatch5.3.21

OR

php_group phpRange≤5.5.1

OR

novell opensuse_leapMatch15.0

Source	Link
wiki	www.wiki.php.net/rfc/strict_sessions
bugs	www.bugs.php.net/bug.php
git	www.git.php.net/
git	www.git.php.net/
web	www.web.nvd.nist.gov/view/vuln/detail

27 Apr 2022 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 35.6

CVSS 26.8

EPSS0.036

session vulnerability privilege management errors intercept sessions php language vulnerability