critical9.1
CVE-2015-1555
Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session val…
Impact
Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zend | Zend Framework | Versions 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5 |