Session Fixation

symfony is vulnerable to session fixation. A malicious user that has access to a PHPSESSID can use it through the Guard Authentication feature in a Symfony application to impersonate another user...