CVE-2015-8124

{"id": "CVE-2015-8124", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-12-07T20:59:14.110", "references": [{"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173271.html", "source": "cve@mitre.org"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173300.html", "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2015/Dec/89", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2015/dsa-3402", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/537183/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/77694", "source": "cve@mitre.org"}, {"url": "https://symfony.com/blog/cve-2015-8124-session-fixation-in-the-remember-me-login-feature", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173271.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173300.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2015/Dec/89", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2015/dsa-3402", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/537183/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/77694", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://symfony.com/blog/cve-2015-8124-session-fixation-in-the-remember-me-login-feature", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Session fixation vulnerability in the \"Remember Me\" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id."}, {"lang": "es", "value": "Vulnerabilidad de fijaci\u00f3n de sesi\u00f3n en la funcionalidad de inicio de sesi\u00f3n 'Remember Me' en Symfony 2.3.x en versiones anteriores a 2.3.35, 2.6.x en versiones anteriores a 2.6.12 y 2.7.x en versiones anteriores a 2.7.7 permite a atacantes remotos secuestrar sesiones web a trav\u00e9s de un id de sesi\u00f3n."}], "lastModified": "2024-11-21T02:38:02.643", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "815710CF-CD6F-482A-AA49-F5DBD69CC78C"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3614217B-B696-42F5-B700-154DC4A10362"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9F16129-1132-410A-ABF5-07043E748EBE"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86E24535-7FDC-4CD5-9CFF-BE3497D8142A"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39FAF963-1682-42ED-BE1C-04F4D67BC7E8"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6FAD933-5F1B-443C-833A-A7CA42B3E3AA"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8315CC2E-1CA5-4877-9D8B-B1CE4C7E951A"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B65CCFF0-491A-49AC-89DC-1C5BB2E17C62"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBF037E9-7BCB-4B15-90E5-AC12B635FCFD"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB53AD64-7FA3-4B51-9BA4-1E6CEBC320B3"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4299D5E-496C-455A-B6CB-1324D73E3BD0"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D52D4F61-92C2-44BA-8913-84C7B9625ECA"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE64BBD6-A363-4331-B146-A15C299FA9B8"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3193871-9D22-489C-999C-047D126CB2A8"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24349F39-72FD-4669-99EB-C53EA8D30703"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B4D9AFF-7F87-48CC-9C82-FC89F909A82C"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E4C305C-1FDF-4D93-97F5-10D8C8ABE7B6"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1770E39-DCE8-4F81-9E18-F606CEA1DA6F"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "104DB666-5608-4822-B4DA-A8BFB64856E2"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B629031-7AC2-4918-9FEC-C9D26EBB0161"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "397E0404-9856-45C1-B12D-058E84F3FA3C"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2EC987B-3C4D-4575-9BC8-9AFB794A20E7"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE17FB48-06AA-4275-9F3A-0CF008C9C86B"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39F81F64-CCF2-4CB1-9504-153267839BEE"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B1244EA-78F7-4501-9E42-52C77CE37963"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CBCD0661-41FA-4F89-A1D8-C50BE232D36D"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AC87263-68E3-4BF8-8ED7-C40CC2F8CE2A"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51A66842-7423-49F0-9FD3-64B7DE146F30"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68CBB5C6-C707-43E9-AFC5-467E376D9218"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53ADBD77-5D7C-4065-AF07-0D7D913EAB4E"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60E9C327-F168-4591-AF45-86AC9695AFBD"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44A428C5-7A39-4B17-850C-5A2BA7D207B5"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6EAA53F-6A62-4BD5-BB3D-B95885877067"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C839442-0832-42C7-8D3C-C3BC75F96CC9"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07CA4138-9897-44A5-BBCC-B5054D5F9EDF"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F13A190-1F97-4D7B-826A-E976934AE82B"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27770F28-584A-48E1-B885-6C6D17F546ED"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D52659E-1F0D-4319-A986-9BA512995C62"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C177DF32-F356-483C-82E5-8FCC68D89A74"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6D9461C-A049-48EC-BB3E-FD3212C82795"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F7EF330-714D-42E4-A2CF-406B84F3945B"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D86A4FF-9BD2-4B3D-A2CE-E9200A4EC690"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D6667BA-5A82-480B-AD9B-0E4CD0188458"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CFF0C34-4474-448B-8402-F9F7E6E1BA00"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EA6C319-AE4B-419F-BCAD-57D8ACF83EA2"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00E132C9-F809-4AD9-959B-FFA8CB92780D"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83BE3955-422A-4E81-9B81-4C2484E5C335"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABCF4EF8-5251-46B4-9B53-44783CD82082"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A03AAA02-DB58-42C5-B4A6-C2608CDB7123"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7DA4FA9-AED8-4CCB-85E4-6D0BF6776FC2"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32021069-B447-40B2-BBF9-0D2CFDE8ECC5"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38F01C2E-5A1B-441A-B58C-C450AA1C1410"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "660AA98C-4E93-4D8B-A4EC-A94E24DCDB9E"}, {"criteria": "cpe:2.3:a:sensiolabs:symfony:2.7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "388F9E94-C2C1-4010-97DA-B008E89D500F"}], "operator": "OR"}]}], "evaluatorComment": "<a href=\"https://cwe.mitre.org/data/definitions/384.htm\">CWE-384: Session Fixation</a>", "sourceIdentifier": "cve@mitre.org"}