TYPO3 Improper Authentication Vulnerability (CVE-2014-3944)

Description

The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors.

Remediation

References

CVE-2014-3944

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1688)

WordPress Plugin Answer My Question SQL Injection (1.3)

Microsoft SQL Server Other Vulnerability (CVE-2000-0402)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4360)

Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2080)

Severity

Medium

Classification

CVE-2014-3944 CWE-287