TYPO3 Neos Extension CVE-2015-2821 Remote Privilege Escalation Vulnerability

Bugtraq ID:	73700
Class:	Design Error
CVE:	CVE-2015-2821
Remote:	Yes
Local:	No
Published:	Mar 28 2015 12:00AM
Updated:	Mar 28 2015 12:00AM
Credit:	Robert Lemke
Vulnerable:	Typo3 Neos 1.2.2 Typo3 Neos 1.2 Typo3 Neos 1.1.2 Typo3 Neos 1.1
Not Vulnerable:	Typo3 Neos 1.2.3 Typo3 Neos 1.1.3

TYPO3 Neos Extension CVE-2015-2821 Remote Privilege Escalation Vulnerability

Neos extension for TYPO3 is prone to a remote privilege-escalation vulnerability.

Remote attackers can exploit this issue to gain elevated privileges and perform unauthorized actions.

Neos 1.1.0 through 1.1.2, and 1.2.0 through 1.2.2 are vulnerable.

TYPO3 Neos Extension CVE-2015-2821 Remote Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPO3 Neos Extension CVE-2015-2821 Remote Privilege Escalation Vulnerability

References:

• Synnefoims Homepage (synnefoims)
  
• TYPO3-NEOS-SA-2015-001: Privilege Escalation in TYPO3 Neos (TYPO3)