ID de Prueba:	1.3.6.1.4.1.25623.1.0.804465
Categoría:	Web application abuses
Título:	TYPO3 6.2.0 - 6.2.2 Multiple Vulnerabilities (TYPO3-CORE-SA-2014-001)
Resumen:	TYPO3 is prone to multiple vulnerabilities.
Descripción:	Summary: TYPO3 is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An error in the authentication subcomponent that is triggered as the program fails to invalidate user's sessions that have timed out. - The program fails to honor user groups of logged in users when caching queries. Vulnerability Impact: Successful exploitation will allow remote attackers to easily gain access to a users session and gain access to potentially sensitive information. Affected Software/OS: TYPO3 versions 6.2.0 through 6.2.2. Solution: Update to version 6.2.3 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3944 Debian Security Information: DSA-2942 (Google Search) http://www.debian.org/security/2014/dsa-2942 http://www.openwall.com/lists/oss-security/2014/06/03/2 Common Vulnerability Exposure (CVE) ID: CVE-2014-3946
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.