GitHub Advisoryadvisory · Packagist

GHSA-6cq5-8cj7-g558 CodeIgniter4 Potential Session Handlers Vulnerability

HIGH Published 2022-12-22 Modified 2022-12-29 Official page ↗
Aliases
CVE-2022-46170
Ecosystem
Packagist
Packages
codeigniter4/framework
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Weaknesses
CWE-287
Reviewed
2022-12-22

Affected packages

• Packagist codeigniter4/framework: < 4.2.11 → fixed in 4.2.11

Description

Impact When an application uses (1) multiple session cookies (e.g., one for user pages and one for admin pages) and (2) a session handler is set to `DatabaseHandler`, `MemcachedHandler`, or `RedisHandler`, then if an attacker gets one session cookie (e.g., one for user pages), they may be able to access pages that require another session cookie (e.g., for admin pages). Patches Upgrade to version 4.2.11 or later. Workarounds • Use only one session cookie. References • https://codeigniter4.github.io/userguide/libraries/sessions.html#session-drivers For more information If you have any questions or comments about this advisory: • Open an issue in codeigniter4/CodeIgniter4 • Email us at SECURITY.md

Related

Alias · CVE (1)

  • CVE-2022-46170 CodeIgniter is a PHP full-stack web framework. vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References