CVE-2015-4050

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support enabled, does not check if the _controller attribute is set, which allows remote attackers to bypass URL signing and security rules by including (1) no hash or (2) an invalid hash in a request to /_fragment.

FragmentListener en el componente HttpKernel en Symfony 2.3.19 hasta 2.3.28, 2.4.9 hasta 2.4.10, 2.5.4 hasta 2.5.11, y 2.6.0 hasta 2.6.7, cuando ek soporte ESI o SSI está habilitado, no comprueba si el atributo _controller esta configurado, lo que permite a atacantes remotos evadir la firma de URLs y las reglas de seguridad mediante la inclusión de (1) ningún hash o (2) un hash inválido en una solicitud a /_fragment.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-05-21 CVE Reserved
2015-06-01 CVE Published
2024-03-22 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-284: Improper Access Control

CAPEC

References (6)

URL	Tag	Source
http://www.securityfocus.com/bid/74928	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159513.html	2016-12-31
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159603.html	2016-12-31
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159610.html	2016-12-31
http://symfony.com/blog/cve-2015-4050-esi-unauthorized-access	2016-12-31
http://www.debian.org/security/2015/dsa-3276	2016-12-31

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.19 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.19"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.20 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.20"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.21 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.21"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.22 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.22"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.23 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.23"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.24 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.24"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.25 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.25"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.26 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.26"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.27 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.27"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.3.28 Search vendor "Sensiolabs" for product "Symfony" and version "2.3.28"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.4.9 Search vendor "Sensiolabs" for product "Symfony" and version "2.4.9"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.4.10 Search vendor "Sensiolabs" for product "Symfony" and version "2.4.10"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.5.4 Search vendor "Sensiolabs" for product "Symfony" and version "2.5.4"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.5.5 Search vendor "Sensiolabs" for product "Symfony" and version "2.5.5"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.5.6 Search vendor "Sensiolabs" for product "Symfony" and version "2.5.6"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.5.7 Search vendor "Sensiolabs" for product "Symfony" and version "2.5.7"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.5.8 Search vendor "Sensiolabs" for product "Symfony" and version "2.5.8"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.5.9 Search vendor "Sensiolabs" for product "Symfony" and version "2.5.9"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.5.10 Search vendor "Sensiolabs" for product "Symfony" and version "2.5.10"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.5.11 Search vendor "Sensiolabs" for product "Symfony" and version "2.5.11"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.6.0 Search vendor "Sensiolabs" for product "Symfony" and version "2.6.0"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.6.1 Search vendor "Sensiolabs" for product "Symfony" and version "2.6.1"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.6.3 Search vendor "Sensiolabs" for product "Symfony" and version "2.6.3"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.6.4 Search vendor "Sensiolabs" for product "Symfony" and version "2.6.4"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.6.5 Search vendor "Sensiolabs" for product "Symfony" and version "2.6.5"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.6.6 Search vendor "Sensiolabs" for product "Symfony" and version "2.6.6"		-		Affected
Sensiolabs Search vendor "Sensiolabs"		Symfony Search vendor "Sensiolabs" for product "Symfony"				2.6.7 Search vendor "Sensiolabs" for product "Symfony" and version "2.6.7"		-		Affected