TYPO3 Direct Mail Extension Authentication Bypass Vulnerability
BID:62661
Info
TYPO3 Direct Mail Extension Authentication Bypass Vulnerability
| Bugtraq ID: | 62661 |
| Class: | Design Error |
| CVE: |
CVE-2013-7400 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 25 2013 12:00AM |
| Updated: | Sep 12 2014 12:14AM |
| Credit: | Bernhard Kraft |
| Vulnerable: |
Typo3 Direct Mail 2.6.10 Typo3 Direct Mail 2.6.9 Typo3 Direct Mail 2.6.5 Typo3 Direct Mail 2.6.4 |
| Not Vulnerable: | |
Discussion
TYPO3 Direct Mail Extension Authentication Bypass Vulnerability
The Direct Mail extension for TYPO3 is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and obtain sensitive information. This may aid in further attacks.
Versions prior to TYPO3 Direct Mail Subscription 3.1.2 are vulnerable.
The Direct Mail extension for TYPO3 is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and obtain sensitive information. This may aid in further attacks.
Versions prior to TYPO3 Direct Mail Subscription 3.1.2 are vulnerable.
Exploit / POC
TYPO3 Direct Mail Extension Authentication Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
TYPO3 Direct Mail Extension Authentication Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.