Sec Bug->Req #60491 [Csd]: Session module is adoptive
| From: | johannes@php.net | Date: | Tue, 25 Feb 2014 10:40:02 +0000 |
| Subject: | Sec Bug->Req #60491 [Csd]: Session module is adoptive | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-184409@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=60491&edit=1
ID: 60491
Updated by: johannes@php.net
Reported by: yohgaki@php.net
Summary: Session module is adoptive
Status: Closed
-Type: Security
+Type: Feature/Change Request
Package: Session related
Operating System: All
PHP Version: Irrelevant
Assigned To: yohgaki
Block user comment: N
Private report: Y
CVE-ID: 2011-4718
Previous Comments:
------------------------------------------------------------------------
[2014-02-25 05:00:54] yohgaki@php.net
This is closed.
Use use_strict_mode=on.
------------------------------------------------------------------------
[2014-02-25 01:24:42] johannes@php.net
yasuo-san, please confirm this can be closed (and marked public).
------------------------------------------------------------------------
[2014-02-12 17:15:41] tyrael@php.net
this should be closed, as it is fixed since 5.5.2 with the addition of the strict sessions, right?
------------------------------------------------------------------------
[2011-12-10 00:52:07] yohgaki@php.net
Description:
------------
Session module is adoptive, so there are chances for session fixation due to
adoption.
CVE ID: CVE-2011-4718
https://wiki.php.net/rfc/strict_sessions
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=60491&edit=1