CVE Catalog
CVE-2015-1555
CriticalSummary
Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9 and 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators.
Risk Assessment
The lack of session validation may lead to unauthorized access to application resources, posing a serious threat to user data security.
Recommendation
It is recommended to update Zend Framework to version 2.2.9 or 2.3.4 to secure the application against these vulnerabilities.
Original NVD description (English source)
Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators.