Zend Framework Session Validators security measure Bypass Vulnerability

Zend Framework Session Validators security measure Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Zend Framework
Description:
Bugtraq id: 72270

Zend Framework (ZF) is an open-source PHP5 development Framework that can be used to develop web programs and services.

The Zend Framework has a session verification program Security Restriction Bypass Vulnerability. Attackers can exploit this vulnerability to bypass certain security restrictions and gain elevated permissions.

<* Source: Yuriy Dyachenko
*>

Suggestion:
Vendor patch:

Zend
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://framework.zend.com/security/advisory/

This article permanently updates the link address: