Security Advisory

CVE-2015-8124

6.8

Vulnerability Description

Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.
Published Date December 7, 2015
Official Source NIST NVD Advisory