ID de Prueba:	1.3.6.1.4.1.25623.1.0.805295
Categoría:	Web application abuses
Título:	TYPO3 'rsaauth' extension Authentication Bypass Vulnerability (SA-2015-001)
Resumen:	TYPO3 is prone to an authentication bypass vulnerability.
Descripción:	Summary: TYPO3 is prone to an authentication bypass vulnerability. Vulnerability Insight: The flaw is in the system extension frontend in rsaauth that is triggered when handling logins Vulnerability Impact: Successful exploitation will allow remote attackers to authenticate as a frontend user whose login name is known. Affected Software/OS: TYPO3 versions 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18 Solution: For 4.5.x series upgrade to TYPO3 version 4.5.40 or later, for 4.3.x, 4.4.x and 4.6.x apply the patch as provided in the referenced vendor bulletin. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2047 BugTraq ID: 72763 http://www.securityfocus.com/bid/72763 Debian Security Information: DSA-3164 (Google Search) http://www.debian.org/security/2015/dsa-3164 http://www.openwall.com/lists/oss-security/2015/02/22/4 http://www.openwall.com/lists/oss-security/2015/02/22/8 http://www.securitytracker.com/id/1031824 SuSE Security Announcement: openSUSE-SU-2016:2169 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.