high7.5
CVE-2015-7503
Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.
Impact
Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zend | Zend Framework | Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5 |