Lucene search

K
osvGoogleOSV:USN-4583-1
HistoryOct 14, 2020 - 5:42 p.m.

php5, php7.0, php7.2, php7.4 vulnerabilities

2020-10-1417:42:17
Google
osv.dev
7

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

It was discovered that PHP incorrectly handled certain encrypt ciphers.
An attacker could possibly use this issue to decrease security or cause
incorrect encryption data. This issue only affected Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2020-7069)

It was discorevered that PHP incorrectly handled certain HTTP cookies.
An attacker could possibly use this issue to forge cookie which is supposed to
be secure. (CVE-2020-7070)