Lucene search

PRIOn knowledge basePRION:CVE-2012-2667

HistoryJun 07, 2012 - 7:55 p.m.

Session fixation

2012-06-0719:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

72.0%

JSON

Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified “database backed session classes.”

CPENameOperatorVersion
symfonyeq1.4.16
symfonyeq1.4.6
symfonyeq1.4.9
symfonyeq1.4.14
symfonyeq1.4.1
symfonyeq1.4.8
symfonyeq1.4.3
symfonyeq1.4.13
symfonyeq1.4.0
symfonyeq1.4.0 rc1

Name	Operator	Version
symfony	eq	1.4.16
symfony	eq	1.4.6
symfony	eq	1.4.9
symfony	eq	1.4.14
symfony	eq	1.4.1
symfony	eq	1.4.8
symfony	eq	1.4.3
symfony	eq	1.4.13
symfony	eq	1.4.0
symfony	eq	1.4.0 rc1

Rows per page:

1-10 of 201

References

secunia.com/advisories/49312

symfony.com/blog/security-release-symfony-1-4-18-released

trac.symfony-project.org/browser/tags/RELEASE_1_4_18/CHANGELOG

www.openwall.com/lists/oss-security/2012/06/04/1

www.openwall.com/lists/oss-security/2012/06/05/2

www.securityfocus.com/bid/53776

exchange.xforce.ibmcloud.com/vulnerabilities/76027

7 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

72.0%

JSON

Related for PRION:CVE-2012-2667