NVD

Id
28443  
Name
CVE-2015-8124  
Description
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-12-07  
Modified Date
2016-12-07  
Seq
2015-8124  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149552 28443 CVE-2015-8124 FEDORA-2015-0efcb5fbc5  View
149553 28443 CVE-2015-8124 FEDORA-2015-0b89738311  View
149554 28443 CVE-2015-8124 20151222 [RT-SA-2015-013] Symfony PHP Framework: Session Fixation In "Remember Me" Login Functionality  View
149555 28443 CVE-2015-8124 DSA-3402  View
149556 28443 CVE-2015-8124 20151222 [RT-SA-2015-013] Symfony PHP Framework: Session Fixation In "Remember Me" Login Functionality  View
149557 28443 CVE-2015-8124 77694  View
149558 28443 CVE-2015-8124 https://symfony.com/blog/cve-2015-8124-session-fixation-in-the-remember-me-login-feature  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10821 JVNDB-2015-006141 Symfony の "Remember Me" ログイン機能における Web セッションをハイジャックされる脆弱性 Symfony の "Remember Me" ログイン機能には、Web セッションをハイジャックされる脆弱性が存在します。 CVE-2015-8124 85349 CVE-2015-8124 28443 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006141.html 2015-11-23 2015-12-09 View