TYPO3 OpenID Module Backend User Account Security Bypass Vulnerability

Bugtraq ID:	38438
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 14 2010 12:00AM
Updated:	Jan 14 2010 12:00AM
Credit:	Jeff Segars
Vulnerable:	Typo3 Typo3 4.3 Typo3 Typo3 4.2.12 Typo3 Typo3 4.2.11 Typo3 Typo3 4.2.10 Typo3 Typo3 4.2.9 Typo3 Typo3 4.2.6 Typo3 Typo3 4.2.4 Typo3 Typo3 4.2.3 Typo3 Typo3 4.2.2 Typo3 Typo3 4.2.1 Typo3 Typo3 4.2 Typo3 Typo3 4.1.13 Typo3 Typo3 4.1.12 Typo3 Typo3 4.1.10 Typo3 Typo3 4.1.8 Typo3 Typo3 4.1.7 Typo3 Typo3 4.1.6 Typo3 Typo3 4.1.4 Typo3 Typo3 4.1 Typo3 Typo3 4.0.13 Typo3 Typo3 4.0.12 Typo3 Typo3 4.0.10 Typo3 Typo3 4.0.9 Typo3 Typo3 4.0.8 Typo3 Typo3 4.0.5 Typo3 Typo3 4.0.4 Typo3 Typo3 4.0.3 Typo3 Typo3 4.0.2 Typo3 Typo3 4.0.1 Typo3 Typo3 4.3.0beta1 Typo3 Typo3 4.1beta Typo3 Typo3 4.1 RC1 Typo3 Typo3 4.0
Not Vulnerable:	Typo3 Typo3 4.3.1

TYPO3 OpenID Module Backend User Account Security Bypass Vulnerability

TYPO3 is prone to a security-bypass vulnerability that affects the OpenID module included in TYPO3.

An attacker can exploit this issue to gain unauthorized access to the affected application.

TYPO3 4.3.0 is vulnerable; other versions may also be affected.

TYPO3 OpenID Module Backend User Account Security Bypass Vulnerability

Attackers can exploit this issue via a browser.

TYPO3 OpenID Module Backend User Account Security Bypass Vulnerability

Solution:
The vendor has released a fix. Please see the references for details.

TYPO3 OpenID Module Backend User Account Security Bypass Vulnerability

References:

• TYPO3 Homepage (TYPO3)
  
• TYPO3 Security Bulletin TYPO3-SA-2010-001: Authentication Bypass in TYPO3 Core (TYPO3)