Zend-Session session validation vulnerability

Zend\Session session validators do not work as expected if set prior to the start of a session. For instance, the following test case fails where $this-manager is an instance of Zend\Session\SessionManager: $this -manager -getValidatorChain -attach'session.validate', arraynew RemoteAddr, 'isValid...

GHSA-96C6-M98X-HXJX Zend-Session session validation vulnerability

Zend\Session session validators do not work as expected if set prior to the start of a session. For instance, the following test case fails where $this-manager is an instance of Zend\Session\SessionManager: $this -manager -getValidatorChain -attach'session.validate', arraynew RemoteAddr, 'isValid...

Zendframework session validation vulnerability

Zend\Session session validators do not work as expected if set prior to the start of a session. For instance, the following test case fails where $this-manager is an instance of Zend\Session\SessionManager: $this -manager -getValidatorChain -attach'session.validate', arraynew RemoteAddr, 'isValid...

GHSA-62F6-H68R-3JPW Zendframework session validation vulnerability

Zend\Session session validators do not work as expected if set prior to the start of a session. For instance, the following test case fails where $this-manager is an instance of Zend\Session\SessionManager: $this -manager -getValidatorChain -attach'session.validate', arraynew RemoteAddr, 'isValid...

PT-2024-40109

Name of the Vulnerable Software and Affected Versions: Zend Session affected versions not specified Description: The issue arises when ZendSession session validators are set before the start of a session, causing them to not work as expected. This allows an attacker to bypass session validators...

PT-2024-40212

Name of the Vulnerable Software and Affected Versions: Zend Session affected versions not specified Description: The issue arises when ZendSession session validators are set before the start of a session, causing them not to work as expected. This allows an attacker to bypass session validators...