PT-2024-40212

Name of the Vulnerable Software and Affected Versions: Zend Session affected versions not specified Description: The issue arises when ZendSession session validators are set before the start of a session, causing them not to work as expected. This allows an attacker to bypass session validators...

PT-2024-40109

Name of the Vulnerable Software and Affected Versions: Zend Session affected versions not specified Description: The issue arises when ZendSession session validators are set before the start of a session, causing them to not work as expected. This allows an attacker to bypass session validators...

SUSE CVE-2015-1555

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators...

Session fixation

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators...

CVE-2015-1555

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators...

CVE-2015-1555

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators...

CVE-2015-1555

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators...

CVE-2015-1555

Zend Framework 2.2.x prior to 2.2.9 and 2.3.x prior to 2.3.4 are vulnerable in Zend\Session/SessionManager to a session validation bypass that allows remote attackers to create valid sessions without session validators. Root cause: improper session validation logic in SessionManager. Impact: pote...

CVE-2015-1555

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators...

Zend Framework < 2.2.9 / 2.3.x < 2.3.4 Session Validators Security Bypass

Binary data 9141.prm...

Zend Framework Session Validators Security Bypass Vulnerability

Zend Framework ZF is an open source PHP5 development framework for developing web programs and services. A session authenticator security restriction bypass vulnerability exists in the implementation of Zend Framework, which can be exploited by an attacker to bypass certain security restrictions...