PT-2016-7959 · Zend · Php-Zendframework

Publicado 2016-04-29 · Atualizado 2016-04-29

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions php-ZendFramework versions prior to 1.12.18

Description The issue concerns a potential information disclosure and insufficient entropy vulnerability in the word CAPTCHA and several other functions.

Recommendations For versions prior to 1.12.18, update to version 1.12.18 to resolve the issue.

Identificadores relacionados

MGASA-2016-0156

Produtos afetados

Php-Zendframework

Referências · 7

• http://framework.zend.com/blog/zend-framework-1-12-17-and-2-4-9-released.html · Nota
• http://framework.zend.com/security/advisory/ZF2015-09 · Nota
• http://framework.zend.com/blog/zend-framework-1-12-18-released.html · Nota
• https://advisories.mageia.org/MGASA-2016-0156.html · Nota de Segurança
• http://framework.zend.com/security/advisory/ZF2016-01 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=18258 · Nota
• https://osv.dev/vulnerability/MGASA-2016-0156 · Aviso do Fabricante