PT-2016-7959 · Zend · Php-Zendframework

Published 2016-04-29 · Updated 2016-04-29

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions php-ZendFramework versions prior to 1.12.18

Description The issue concerns a potential information disclosure and insufficient entropy vulnerability in the word CAPTCHA and several other functions.

Recommendations For versions prior to 1.12.18, update to version 1.12.18 to resolve the issue.

Related Identifiers

MGASA-2016-0156

Affected Products

Php-Zendframework

References · 7

• https://advisories.mageia.org/MGASA-2016-0156.html · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0156 · Vendor Advisory
• http://framework.zend.com/blog/zend-framework-1-12-17-and-2-4-9-released.html · Note
• http://framework.zend.com/security/advisory/ZF2015-09 · Note
• http://framework.zend.com/blog/zend-framework-1-12-18-released.html · Note
• http://framework.zend.com/security/advisory/ZF2016-01 · Note
• https://bugs.mageia.org/show_bug.cgi?id=18258 · Note