TYPO3 Front End User Registration Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	57455
Class:	Design Error
CVE:	CVE-2012-5890
Remote:	Yes
Local:	No
Published:	Feb 23 2012 12:00AM
Updated:	Feb 23 2012 12:00AM
Credit:	Christian Boltz and Franz G. Jahn
Vulnerable:	Franz Holzinger Front End User Registration 2.6.1
Not Vulnerable:	Franz Holzinger Front End User Registration 2.6.2

TYPO3 Front End User Registration Multiple Information Disclosure Vulnerabilities

TYPO3 Front End User Registration is prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to disclose sensitive information; this may aid in further attacks.

TYPO3 Front End User Registration 2.6.1 and prior versions are vulnerable.

TYPO3 Front End User Registration Multiple Information Disclosure Vulnerabilities

Attackers can exploit these issues with a browser.

TYPO3 Front End User Registration Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references for details.

TYPO3 Front End User Registration Multiple Information Disclosure Vulnerabilities

References:

• Front End User Registration Product page (Franz Holzinger)
  
• TYPO3-EXT-SA-2012-002: Information disclosure vulnerabilities (TYPO3)