Description

The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

Remediation

References

CVE-2015-4599

Related Vulnerabilities

WordPress Plugin Revive Old Post-Auto Post to Social Media 'cat' Parameter SQL Injection (3.2.5)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.1.1)

IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4699)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.37)

Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2014-0118)

Severity

Critical

Classification

CVE-2015-4599 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities