Description

The web application is based on Typo3 CMS. Typo3 Admin interface is publicly accessible.

Remediation

Restrict access to Typo3 Admin.

References

Backend and Frontend

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1831)

WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.4)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0702)

Joomla! Core 4.x.x Multiple Vulnerabilities (4.0.0 - 4.2.3)

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5652)

Severity

Info

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Insecure Admin Access Bruteforce Possible CWE-200