Back to Database
Status published
Critical
CVE-2017-11365
Certain Symfony products are affected by: Incorrect Access Control. This...
Vulnerability Description
Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-11365
Credits & Attribution
No credits recorded in the NVD database.
References
More from sensiolabs
View All →CVE-2019-18889
An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0...
Critical
9.8
CVE-2019-18888
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0...
High
7.5
CVE-2019-18887
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0...
High
8.1
CVE-2019-18886
An issue was discovered in Symfony 4.2.0 to 4.2.11 and...
Medium
5.3
CVE-2019-11325
An issue was discovered in Symfony before 4.2.12 and 4.3.x...
Critical
9.8
Affected Vendor
sensiolabs
View all reports →Affected Software
symfony
Vulnerable Versions:
2.7.30, 2.8.23, 3.2.10, 3.3.3
Timeline
Official Publish:
May 23rd, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.