Lucene search

[email protected]CVE-2015-4050

HistoryJun 02, 2015 - 2:59 p.m.

CVE-2015-4050

2015-06-0214:59:12

CWE-284

[email protected]

web.nvd.nist.gov

cve-2015-4050

symfony

httpkernel

security bypass

esi

ssi

remote attack

url signing

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.5%

JSON

FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support enabled, does not check if the _controller attribute is set, which allows remote attackers to bypass URL signing and security rules by including (1) no hash or (2) an invalid hash in a request to /_fragment.

Affected configurations

NVD

Node

sensiolabssymfonyMatch2.3.19

sensiolabssymfonyMatch2.3.20

sensiolabssymfonyMatch2.3.21

sensiolabssymfonyMatch2.3.22

sensiolabssymfonyMatch2.3.23

sensiolabssymfonyMatch2.3.24

sensiolabssymfonyMatch2.3.25

sensiolabssymfonyMatch2.3.26

sensiolabssymfonyMatch2.3.27

sensiolabssymfonyMatch2.3.28

sensiolabssymfonyMatch2.4.9

sensiolabssymfonyMatch2.4.10

sensiolabssymfonyMatch2.5.4

sensiolabssymfonyMatch2.5.5

sensiolabssymfonyMatch2.5.6

sensiolabssymfonyMatch2.5.7

sensiolabssymfonyMatch2.5.8

sensiolabssymfonyMatch2.5.9

sensiolabssymfonyMatch2.5.10

sensiolabssymfonyMatch2.5.11

sensiolabssymfonyMatch2.6.0

sensiolabssymfonyMatch2.6.1

sensiolabssymfonyMatch2.6.3

sensiolabssymfonyMatch2.6.4

sensiolabssymfonyMatch2.6.5

sensiolabssymfonyMatch2.6.6

sensiolabssymfonyMatch2.6.7

CPENameOperatorVersion
sensiolabs:symfonysensiolabs symfonyeq2.3.19
sensiolabs:symfonysensiolabs symfonyeq2.3.20
sensiolabs:symfonysensiolabs symfonyeq2.3.21
sensiolabs:symfonysensiolabs symfonyeq2.3.22
sensiolabs:symfonysensiolabs symfonyeq2.3.23
sensiolabs:symfonysensiolabs symfonyeq2.3.24
sensiolabs:symfonysensiolabs symfonyeq2.3.25
sensiolabs:symfonysensiolabs symfonyeq2.3.26
sensiolabs:symfonysensiolabs symfonyeq2.3.27
sensiolabs:symfonysensiolabs symfonyeq2.3.28

CPE	Name	Operator	Version
sensiolabs:symfony	sensiolabs symfony	eq	2.3.19
sensiolabs:symfony	sensiolabs symfony	eq	2.3.20
sensiolabs:symfony	sensiolabs symfony	eq	2.3.21
sensiolabs:symfony	sensiolabs symfony	eq	2.3.22
sensiolabs:symfony	sensiolabs symfony	eq	2.3.23
sensiolabs:symfony	sensiolabs symfony	eq	2.3.24
sensiolabs:symfony	sensiolabs symfony	eq	2.3.25
sensiolabs:symfony	sensiolabs symfony	eq	2.3.26
sensiolabs:symfony	sensiolabs symfony	eq	2.3.27
sensiolabs:symfony	sensiolabs symfony	eq	2.3.28