RETIRED: TYPO3 Tools for Extbase Development Extension Access Bypass Vulnerability

Bugtraq ID:	65552
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 12 2014 12:00AM
Updated:	Sep 12 2014 12:54AM
Credit:	Andrea Schmuttermair
Vulnerable:
Not Vulnerable:

RETIRED: TYPO3 Tools for Extbase Development Extension Access Bypass Vulnerability

Tools for Extbase development Extension for TYPO3 is prone to an access-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and gain access to sensitive information. This may aid in launching other attacks.

Tools for Extbase development Extension 1.5.0 is vulnerable; other versions may also be affected.

Note: This BID is being retired. This issue has been moved to BID 65550 (TYPO3 Yet Another Gallery and Tools for Extbase Development Access Bypass Vulnerability) for better documentation.

RETIRED: TYPO3 Tools for Extbase Development Extension Access Bypass Vulnerability

An attacker can exploit this issue using a web browser.

RETIRED: TYPO3 Tools for Extbase Development Extension Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: TYPO3 Tools for Extbase Development Extension Access Bypass Vulnerability

References:

• TYPO3 Homepage (TYPO3)