Routes behind a firewall are accessible even when not logged in

CVE-2012-6431

Affected version: >=2.0.0,<2.0.19

Reported by:
FriendsOfPHP/security-advisories