CVE-2016-4309

Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via the…

published June 30, 2016

CVSS

—

EPSS

10%

Percentile

95.6

In the wild

Unconfirmed

What it is

Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via the PHPSESSID parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.10220 · 95.6th percentile
Published: 2016-06-30T17:00Z

EPSS history

Timeline

30 JUN 17:00Z
Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via the…
cvelistv5