PT-2017-6496
CVE-2015-1555
·
تاريخ النشر
2017-08-07
·
تاريخ التحديث
2017-08-15
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Zend Framework versions 2.2.x through 2.2.8
Zend Framework versions 2.3.x through 2.3.3
Description
The issue allows remote attackers to create valid sessions without using session validators, potentially leading to unauthorized access.
Recommendations
For versions 2.2.x through 2.2.8, update to version 2.2.9 or later.
For versions 2.3.x through 2.3.3, update to version 2.3.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾