Authentication library in TYPO3 vulnerable to session fixation
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2009-0256US | high7.5 | — | ||
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessio… | ||||
02
references
External citations — patches, advisories, analysis.
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001WEB
- http://www.debian.org/security/2009/dsa-1711WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48133WEB
- https://github.com/TYPO3/typo3PACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2009-0256ADVISORY
- https://web.archive.org/web/20111210005350/http://www.securityfocus.com/bid/33376WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan