VULNERABILITY INTELLIGENCE

CVE-2012-2667

CVSS score4.3 MEDIUM
EPSS probability1.33%
CISA KEVNot currently listed
Published2012-06-07
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."

Primary references