Session fixation

2017-08-0717:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.9%

JSON

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators.

CPENameOperatorVersion
zend_frameworkeq2.2.4
zend_frameworkeq2.3.0
zend_frameworkeq2.2.1
zend_frameworkeq2.2.2
zend_frameworkeq2.2.8
zend_frameworkeq2.2.7
zend_frameworkeq2.3.1
zend_frameworkeq2.3.2
zend_frameworkeq2.3.3
zend_frameworkeq2.2.3

Name	Operator	Version
zend_framework	eq	2.2.4
zend_framework	eq	2.3.0
zend_framework	eq	2.2.1
zend_framework	eq	2.2.2
zend_framework	eq	2.2.8
zend_framework	eq	2.2.7
zend_framework	eq	2.3.1
zend_framework	eq	2.3.2
zend_framework	eq	2.3.3
zend_framework	eq	2.2.3