K35232053: PHP vulnerability CVE-2016-7125

🗓️ 21 Feb 2023 19:00:11Reported by f5Type

f5🔗 my.f5.com👁 47 Views

PHP vulnerability CVE-2016-7125 allows remote attackers to inject arbitrary data into PHP session by controlling session name, leading to unauthorized access

Reporter	Title	Published	Views	Family All 138
IBM Security Bulletins	Security Bulletins for IBM Tealeaf Customer Experience offerings	16 Jun 201819:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL and PHP affect IBM Tealeaf Customer Experience (CVE-2016-2107, CVE-2016-6290, CVE-2016-7125)	16 Jun 201820:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple php vulnerabilities	18 Jun 201801:34	–	ibm
Tenable Nessus	PHP 5.6.x < 5.6.25 / 7.0.x < 7.0.10 Multiple Vulnerabilities	26 Sep 201600:00	–	nessus
Tenable Nessus	Debian DSA-3689-1 : php5 - security update	10 Oct 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1984)	24 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-2438)	4 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : php (EulerOS-SA-2019-2649)	18 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747)	1 Jul 202000:00	–	nessus

Vulners

Node

f5 big-ip_ltmRange12.0.0–12.1.2

OR

f5 big-ip_ltmRange11.4.0–11.6.1

OR

f5 big-ip_ltmMatch11.2.1

OR

f5 big-ip_ltmRange10.2.1–10.2.4

OR

f5 big-ip_aamRange12.0.0–12.1.2

OR

f5 big-ip_aamRange11.4.0–11.6.1

OR

f5 big-ip_afmRange12.0.0–12.1.2

OR

f5 big-ip_afmRange11.4.0–11.6.1

OR

f5 big-ip_analyticsRange12.0.0–12.1.2

OR

f5 big-ip_analyticsRange11.4.0–11.6.1

OR

f5 big-ip_analyticsMatch11.2.1

OR

f5 big-ip_apmRange12.0.0–12.1.2

OR

f5 big-ip_apmRange11.4.0–11.6.1

OR

f5 big-ip_apmMatch11.2.1

OR

f5 big-ip_apmRange10.2.1–10.2.4

OR

f5 big-ip_asmRange12.0.0–12.1.2

OR

f5 big-ip_asmRange11.4.0–11.6.1

OR

f5 big-ip_asmMatch11.2.1

OR

f5 big-ip_asmRange10.2.1–10.2.4

OR

f5 big-ip_dnsRange12.0.0–12.1.2

OR

f5 big-ip_edge_gatewayMatch11.2.1

OR

f5 big-ip_edge_gatewayRange10.2.1–10.2.4

OR

f5 big-ip_gtmRange11.4.0–11.6.1

OR

f5 big-ip_gtmMatch11.2.1

OR

f5 big-ip_gtmRange10.2.1–10.2.4

OR

f5 big-ip_link_controllerRange12.0.0–12.1.2

OR

f5 big-ip_link_controllerRange11.4.0–11.6.1

OR

f5 big-ip_link_controllerMatch11.2.1

OR

f5 big-ip_link_controllerRange10.2.1–10.2.4

OR

f5 big-ip_pemRange12.0.0–12.1.2

OR

f5 big-ip_pemRange11.4.0–11.6.1

OR

f5 big-ip_psmRange11.4.0–11.4.1

OR

f5 big-ip_psmRange10.2.1–10.2.4

OR

f5 big-ip_webacceleratorMatch11.2.1

OR

f5 big-ip_webacceleratorRange10.2.1–10.2.4

OR

f5 big-ip_websafeRange12.0.0–12.1.2

OR

f5 big-ip_websafeRange11.6.0–11.6.1

OR

f5 enterprise_managerMatch3.1.1

OR

f5 big-iq_cloudRange4.0.0–4.5.0

OR

f5 big-iq_deviceRange4.2.0–4.5.0

OR

f5 big-iq_securityRange4.0.0–4.5.0

OR

f5 big-iq_adcMatch4.5.0

OR

f5 big-iq_centralized_managementRange5.0.0–5.1.0

OR

f5 big-iq_centralized_managementMatch4.6.0

OR

f5 big-iq_cloudMatch1.0.0

OR

f5 big-iq_orchestrationMatch1.0.0

21 Feb 2023 19:00Current

8.6High risk

Vulners AI Score8.6

CVSS 25

CVSS 37.5

EPSS0.00546

php vulnerability remote attackers arbitrary data session name unauthorized access