Remote Key Recovery Vulnerability in Zend Framework Products
CVE-2015-7503

7.5HIGH

Key Information:

Vendor

Zend

Status
Zend Framework
Vendor
CVE Published:
10 October 2017
đź”” Create Zend Vulnerability Alert

What is CVE-2015-7503?

A vulnerability in various versions of Zend Framework prior to 2.4.9 and certain releases of zend-crypt allows remote attackers to recover RSA private keys. This flaw can be exploited without user interaction, posing significant risks to applications relying on this framework for cryptographic operations. It is crucial for users to update their environments to protected versions to mitigate these security risks.

References

https://framework.zend.com/security/advisory/ZF2015-10
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1283137
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.