5210 matches found
Fedora 16 : php-symfony-symfony-1.4.18-1.fc16 (2012-8985)
upstream 1.4.18 - fixes: CVE-2012-2667 php-symfony-symfony: Session fixation flaw Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 17 : php-symfony-symfony-1.4.18-1.fc17 (2012-8966)
upstream 1.4.18 - fixes: CVE-2012-2667 php-symfony-symfony: Session fixation flaw Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2012-2667
Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."...
Session fixation
Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."...
CVE-2012-2667
Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."...
CVE-2012-2667
Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."...
CVE-2012-2667
CVE-2012-2667 affects SensioLabs Symfony prior to 1.4.18. The vulnerability is a session fixation issue in sfBasicSecurityUser.class.php related to the regenerate method, with roots in how sessions are handled (including database-backed sessions). The fixed version is Symfony 1.4.18 (as implement...
CVE-2012-2667: Undefined Security Weakness
Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."...
PT-2012-4168
Name of the Vulnerable Software and Affected Versions SensioLabs Symfony versions prior to 1.4.18 Description The issue concerns a session fixation vulnerability. It allows remote attackers to hijack web sessions, specifically through vectors related to the regenerate method and certain database...
DEBIAN-CVE-2012-2144
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
CVE-2012-2144
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
CVE-2012-2144
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
Session fixation
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
PYSEC-2012-33
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
PYSEC-2012-33
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
CVE-2012-2144
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
CVE-2012-2144
CVE-2012-2144 : Session fixation in OpenStack Horizon (folsom-1 and 2012.1) allows remote attackers to hijack web sessions via the sessionid cookie. Vulnerable component: Horizon UI. Impact: session hijacking via cookie manipulation. Root cause: session fixation through sessionid handling as desc...
CVE-2012-2144
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
CVE-2012-2144
Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...
PT-2012-6309
Name of the Vulnerable Software and Affected Versions OpenStack Dashboard Horizon versions folsom-1 through 2012.1 Description A session fixation issue allows remote attackers to hijack web sessions via the sessionid cookie. Recommendations For OpenStack Dashboard Horizon versions folsom-1 throug...