Vulnerability CVE-2019-10911


Published: 2019-05-16

Description:
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me login functionality enabled. This is related to symfony/security.

Type:

CWE-287

(Improper Authentication)

Vendor: Sensiolabs
Product: Symfony 
Version:
4.1.2
4.1.1
4.1.0
3.4.9
3.4.8
3.4.7
3.4.6
3.4.5
3.4.4
3.4.3
3.4.2
3.4.13
3.4.12
3.4.11
3.4.10
3.4.1
3.4.0
2.8.9
2.8.8
2.8.7
2.8.6
2.8.5
2.8.43
2.8.42
2.8.41
2.8.40
2.8.4
2.8.39
2.8.38
2.8.37
2.8.36
2.8.35
2.8.34
2.8.33
2.8.32
2.8.31
2.8.30
2.8.3
2.8.29
2.8.28
2.8.27
2.8.26
2.8.25
2.8.24
2.8.23
2.8.22
2.8.21
2.8.20
2.8.2
2.8.19
2.8.18
2.8.17
2.8.16
2.8.15
2.8.14
2.8.13
2.8.12
2.8.11
2.8.10
2.8.1
2.8.0
2.7.9
2.7.8
2.7.7
2.7.6
2.7.5
2.7.48
2.7.47
2.7.46
2.7.45
2.7.44
2.7.43
2.7.42
2.7.41
2.7.40
2.7.4
2.7.39
2.7.38
2.7.37
2.7.36
2.7.35
2.7.34
2.7.33
2.7.32
2.7.31
2.7.30
2.7.3
2.7.29
2.7.28
2.7.27
2.7.26
2.7.25
2.7.24
2.7.23
2.7.22
2.7.21
2.7.20
2.7.2
2.7.19
2.7.18
See more versions on NVD

CVSS2 => (AV:N/AC:M/Au:S/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6/10
6.4/10
6.8/10
Exploit range
Attack complexity
Authentication
Remote
Medium
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

 References:
https://github.com/symfony/symfony/commit/a29ce2817cf43bb1850cf6af114004ac26c7a081
https://symfony.com/blog/cve-2019-10911-add-a-separator-in-the-remember-me-cookie-hash

Related CVE
CVE-2017-11365
Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator.
CVE-2019-10913
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL...
CVE-2019-10912
In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that the current ...
CVE-2019-10910
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-inject...
CVE-2019-10909
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.
CVE-2018-19790
An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacke...
CVE-2018-19789
An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1. When using the scalar type hint `string` in a setter method (e.g. `setName(string $name)`...
CVE-2017-16790
An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. When a form is submitted by the user, the request handler classes of the Form component merge POST data and uploaded files data into one array. This b...

Copyright 2019, cxsecurity.com

 

Back to Top