CVE-2011-4718

Public on 2013-08-13

Modified on 2014-09-15

Description

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.

Severity

Medium

See what this means

CVSS v3 Base Score

5.8

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	php54	2013-09-19	ALAS-2013-224

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv2	5.8	AV:N/AC:M/Au:N/C:P/I:P/A:N
NVD	CVSSv2	6.8	AV:N/AC:M/Au:N/C:P/I:P/A:P

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2011-4718 Mitre: CVE-2011-4718