Zend Framework CVE-2014-8088 Authentication Bypass Vulnerability

Bugtraq ID:	70378
Class:	Input Validation Error
CVE:	CVE-2014-8088
Remote:	Yes
Local:	No
Published:	Oct 10 2014 12:00AM
Updated:	Jul 15 2015 12:04AM
Credit:	Matthew Daley
Vulnerable:	Zend Zend Framework 1.11.6 Zend Zend Framework 1.11.4 Zend Zend Framework 1.11.3 Zend Zend Framework 1.10.9 Zend Zend Framework 1.10.4 Zend Zend Framework 1.10.3 Zend Zend Framework 1.10.2 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Zend Framework CVE-2014-8088 Authentication Bypass Vulnerability

Zend Framework is prone to an authentication-bypass vulnerability.

An attacker can exploit these issues to bypass the authentication mechanism and gain unauthorized access; this may aid in launching further attacks.

Zend Framework CVE-2014-8088 Authentication Bypass Vulnerability

An attacker can exploit this issue using a web browser.

Zend Framework CVE-2014-8088 Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Zend Framework CVE-2014-8088 Authentication Bypass Vulnerability

References:

• Zend Framework Homepage (Zend)