NetSight
high7.5

CVE-2015-7503

Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.

Impact

Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.

Affected products

VendorProductAffected versions
ZendZend Framework
Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5

Weakness classification

References