TYPO3 LDAP / SSO Authentication Extension Authentication Bypass Vulnerability

Bugtraq ID:	71981
Class:	Access Validation Error
CVE:	CVE-2015-1401
Remote:	Yes
Local:	No
Published:	Jan 08 2015 12:00AM
Updated:	Feb 04 2015 12:03AM
Credit:	Stefan Kaifer
Vulnerable:
Not Vulnerable:

TYPO3 LDAP / SSO Authentication Extension Authentication Bypass Vulnerability

The LDAP / SSO Authentication extension for TYPO3 is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication mechanism and obtain sensitive information. This may aid in further attacks.

LDAP / SSO Authentication 2.0.0 is vulnerable; other versions may also be affected.

TYPO3 LDAP / SSO Authentication Extension Authentication Bypass Vulnerability

An attacker can exploit this issue using a web browser or readily available tools.

TYPO3 LDAP / SSO Authentication Extension Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TYPO3 LDAP / SSO Authentication Extension Authentication Bypass Vulnerability

References:

• TYPO3 Homepage (TYPO3)