PT-2018-3148 · Symfony · Symfony

Chris Wilkinson · Publicado 2018-05-25 · Atualizado 2022-05-14 · CVE-2018-11385

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symfony versions 2.7.x through 2.7.47 Symfony versions 2.8.x through 2.8.40 Symfony versions 3.3.x through 3.3.16 Symfony versions 3.4.x through 3.4.10 Symfony versions 4.0.x through 4.0.10

Description The issue is related to session management errors in the Security component of the Symfony platform. It may allow a remote attacker to elevate their privileges. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web application if the session id value was previously known to the attacker.

Recommendations For Symfony versions 2.7.x through 2.7.47, update to version 2.7.48 or later. For Symfony versions 2.8.x through 2.8.40, update to version 2.8.41 or later. For Symfony versions 3.3.x through 3.3.16, update to version 3.3.17 or later. For Symfony versions 3.4.x through 3.4.10, update to version 3.4.11 or later. For Symfony versions 4.0.x through 4.0.10, update to version 4.0.11 or later.

Exploit

Correção

Session Fixation

Enumeração de Fraquezas

CWE-384

Identificadores relacionados

BDU:2019-04243

CVE-2018-11385

DLA-1707-1

DSA-4262-1

GHSA-G4RG-RW65-8HFG

Produtos afetados

Symfony

Referências · 29

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2018-11385.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2018-11385.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2018-11385.yaml · Exploit
• https://github.com/symfony/symfony · Nota
• https://github.com/symfony/symfony/commit/194caff28b56707ea98e746c6582c06acbb9bc3f · Nota
• https://github.com/symfony/symfony/commit/fad1e1f2ea336e85c889feece9d0e23fbfcf777d · Nota
• https://github.com/symfony/symfony/commit/fa5bf4b17d45ee32f41bd1a9abc3fb6c134ec89b · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/WU5N2TZFNGXDGMXMPP7LZCWTFLENF6WH · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11385 · Nota de Segurança
• https://osv.dev/vulnerability/DLA-1707-1 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-g4rg-rw65-8hfg · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-11385 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-11385 · Aviso do Fabricante