TYPO3 Front End User Registration Extension Authentication Bypass Vulnerability

Bugtraq ID:	42032
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 28 2010 12:00AM
Updated:	Jul 28 2010 12:00AM
Credit:	Petra Arentzen
Vulnerable:
Not Vulnerable:

TYPO3 Front End User Registration Extension Authentication Bypass Vulnerability

The Front End User Registration (sr_feuser_register) extension for TYPO3 is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to gain unauthorized access to the affected application.

Front End User Registration 2.5.25 is vulnerable; other versions may also be affected.

TYPO3 Front End User Registration Extension Authentication Bypass Vulnerability

Attackers can exploit this issue via readily available tools.

TYPO3 Front End User Registration Extension Authentication Bypass Vulnerability

Solution:
Updated versions are available from the TYPO3 extension manager. Please see the references for more information.

TYPO3 Front End User Registration Extension Authentication Bypass Vulnerability

References:

• TYPO3 Homepage (TYPO3)
  
• TYPO3 Security Bulletin TYPO3-SA-2010-013: Vulnerabilitiy in extension Front End (TYPO3)