ID de Prueba:	1.3.6.1.4.1.25623.1.0.803989
Categoría:	Web application abuses
Título:	TYPO3 jumpUrl File Disclosure Vulnerability (TYPO3-SA-2009-002)
Resumen:	TYPO3 is prone to multiple vulnerabilities.
Descripción:	Summary: TYPO3 is prone to multiple vulnerabilities. Vulnerability Insight: Multiple errors exist in the application: - An error exists in jumpUrl mechanism, which will disclose a hash secret. - An error exists in backend user interface, which fails to validate user supplied input properly. Vulnerability Impact: Successful exploitation will allow remote attackers to steal the victim's cookie-based authentication credentials or access arbitrary file. Affected Software/OS: TYPO3 versions 3.3.x, 3.5.x, 3.6.x, 3.7.x, 3.8.x, 4.0 through 4.0.11, 4.1.0 through 4.1.9, 4.2.0 through 4.2.5 and 4.3alpha1. Solution: Update to version 4.0.12, 4.1.10, 4.2.6 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0815 Debian Security Information: DSA-1720 (Google Search) http://www.debian.org/security/2009/dsa-1720 http://www.openwall.com/lists/oss-security/2009/02/10/6 http://www.securitytracker.com/id?1021710 Common Vulnerability Exposure (CVE) ID: CVE-2009-0816 http://www.securitytracker.com/id?1021709
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.