CVE-2015-8124
Publication date 7 December 2015
Last updated 24 July 2024
Ubuntu priority
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.
Status
Package | Ubuntu Release | Status |
---|---|---|
symfony | 18.04 LTS bionic |
Not affected
|
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty | Not in release | |