Описание
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.4.6+dfsg-1 |
| devel | not-affected | 3.4.15+dfsg-2ubuntu4 |
| esm-apps-legacy/xenial | not-affected | 2.7.10-0ubuntu2 |
| esm-apps/bionic | not-affected | 3.4.6+dfsg-1 |
| esm-apps/xenial | not-affected | 2.7.10-0ubuntu2 |
| esm-infra-legacy/trusty | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | DNE |
Показывать по
10
EPSS
Процентиль: 85%
0.02712
Низкий
6.8 Medium
CVSS2
Связанные уязвимости
nvd
почти 11 лет назад
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.
debian
почти 11 лет назад
Session fixation vulnerability in the "Remember Me" login feature in S ...
EPSS
Процентиль: 85%
0.02712
Низкий
6.8 Medium
CVSS2