9.1
CVSSv3

CVE-2015-1555

Published: 07/08/2017 Updated: 15/08/2017
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

Zend/Session/SessionManager in Zend Framework 2.2.x prior to 2.2.9, 2.3.x prior to 2.3.4 allows remote malicious users to create valid sessions without using session validators.

Vulnerable Product Search on Vulmon Subscribe to Product

zend zend framework 2.2.4

zend zend framework 2.2.2

zend zend framework 2.3.0

zend zend framework 2.2.1

zend zend framework 2.2.0

zend zend framework 2.3.2

zend zend framework 2.3.1

zend zend framework 2.2.8

zend zend framework 2.2.7

zend zend framework 2.2.6

zend zend framework 2.2.5

zend zend framework 2.2.3

zend zend framework 2.3.3