TYPO3 'feuser_adminLib.inc' Library Security Bypass Vulnerability

Bugtraq ID:	64248
Class:	Design Error
CVE:	CVE-2013-7080
Remote:	Yes
Local:	No
Published:	Dec 10 2013 12:00AM
Updated:	Jan 02 2014 12:28AM
Credit:	Bernhard Kraft
Vulnerable:	Typo3 Typo3 4.5.13 Typo3 Typo3 4.5.8 Typo3 Typo3 4.5.7 Typo3 Typo3 4.5.5 Typo3 Typo3 4.5.9 Typo3 Typo3 4.5.6 Typo3 Typo3 4.5.4 Typo3 Typo3 4.5.3 Typo3 Typo3 4.5.2 Typo3 Typo3 4.5.15 Typo3 Typo3 4.5.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

TYPO3 'feuser_adminLib.inc' Library Security Bypass Vulnerability

TYPO3 is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

This issue is fixed in TYPO3 4.5.32, 4.7.17, and 6.0.12.

TYPO3 'feuser_adminLib.inc' Library Security Bypass Vulnerability

Attackers can use a browser to exploit this issue.

TYPO3 'feuser_adminLib.inc' Library Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TYPO3 'feuser_adminLib.inc' Library Security Bypass Vulnerability

References:

• TYPO3 Homepage (TYPO3)