Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified database backed session classes.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Symfony | Sensiolabs | 1.4.16 | 1.4.16 |
Symfony | Sensiolabs | 1.4.6 | 1.4.6 |
Symfony | Sensiolabs | 1.4.9 | 1.4.9 |
Symfony | Sensiolabs | 1.4.14 | 1.4.14 |
Symfony | Sensiolabs | 1.4.1 | 1.4.1 |
Symfony | Sensiolabs | 1.4.8 | 1.4.8 |
Symfony | Sensiolabs | 1.4.3 | 1.4.3 |
Symfony | Sensiolabs | 1.4.13 | 1.4.13 |
Symfony | Sensiolabs | 1.4.0 | 1.4.0 |
Symfony | Sensiolabs | 1.4.0 | 1.4.0 |
Symfony | Sensiolabs | 1.4.12 | 1.4.12 |
Symfony | Sensiolabs | 1.4.4 | 1.4.4 |
Symfony | Sensiolabs | 1.4.10 | 1.4.10 |
Symfony | Sensiolabs | 1.4.15 | 1.4.15 |
Symfony | Sensiolabs | 1.4.7 | 1.4.7 |
Symfony | Sensiolabs | 1.4.5 | 1.4.5 |
Symfony | Sensiolabs | 1.4.0 | 1.4.0 |
Symfony | Sensiolabs | * | 1.4.17 |
Symfony | Sensiolabs | 1.4.11 | 1.4.11 |
Symfony | Sensiolabs | 1.4.2 | 1.4.2 |