Advisoriesby IbisOktaOKTA-0B2Y6OB
Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK
No fix yet
Session cookies of applications using the Auth0-PHP SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. Upgrade Auth0/Auth0-PHP to version 8.14.0.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Changes since it was listed
Severity: Unrated to Critical
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Severity from
- NVD