TYPO3 Direct Mail Subscription 'feuser_adminLib.inc' Library Security Bypass Vulnerability
BID:65580
Info
TYPO3 Direct Mail Subscription 'feuser_adminLib.inc' Library Security Bypass Vulnerability
| Bugtraq ID: | 65580 |
| Class: | Design Error |
| CVE: |
CVE-2013-7075 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 12 2014 12:00AM |
| Updated: | Feb 12 2014 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Typo3 Direct Mail Subscription 2.0 |
| Not Vulnerable: |
Typo3 Direct Mail Subscription 2.0.1 |
Discussion
TYPO3 Direct Mail Subscription 'feuser_adminLib.inc' Library Security Bypass Vulnerability
The Direct Mail extension for TYPO3 is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Version prior to Direct Mail Subscription 2.0.1 are vulnerable.
The Direct Mail extension for TYPO3 is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Version prior to Direct Mail Subscription 2.0.1 are vulnerable.
Solution / Fix
TYPO3 Direct Mail Subscription 'feuser_adminLib.inc' Library Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.