TYPO3 ClickStream Analyzer Information Disclosure Vulnerability

Bugtraq ID:	34385
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 06 2009 12:00AM
Updated:	Apr 06 2009 04:06PM
Credit:	Valery Romanchev
Vulnerable:	ClickStream Analyzer ClickStream Analyzer 0.3
Not Vulnerable:

TYPO3 ClickStream Analyzer Information Disclosure Vulnerability

TYPO3 ClickStream Analyzer ('alternet_csa_out') is prone to an information-disclosure vulnerability.

Attackers may exploit this issue to harvest sensitive information that may lead to further attacks against the underlying system and other users.

ClickStream Analyzer 0.3.0 and earlier are affected.

TYPO3 ClickStream Analyzer Information Disclosure Vulnerability

Attackers can exploit this issue via a browser.

TYPO3 ClickStream Analyzer Information Disclosure Vulnerability

Solution:
NOTE: The vendor has discontinued development of this application and will not release a fix.

TYPO3 ClickStream Analyzer Information Disclosure Vulnerability

References:

• ClickStream Analyzer (TYPO3)
  
• Synnefoims Homepage (synnefoims)
  
• TYPO3 Collective Security Bulletin TYPO3-SA-2009-005 (Typo3)