PT-2010-5628 · Typo3 · Typo3

Gregor Kopf · Publicado 1970-01-01 · Atualizado 2022-05-17 · CVE-2010-3714

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.2.x through 4.2.14 TYPO3 versions 4.3.x through 4.3.6 TYPO3 versions 4.4.x through 4.4.3

Description The issue is related to the jumpUrl implementation in tslib/class.tslib fe.php, which does not properly compare certain hash values during access-control decisions. This allows remote attackers to read arbitrary files via unspecified vectors. The vulnerability can be exploited remotely and may lead to a breach of confidentiality of protected information.

Recommendations For TYPO3 versions 4.2.x through 4.2.14, update to version 4.2.15 or later. For TYPO3 versions 4.3.x through 4.3.6, update to version 4.3.7 or later. For TYPO3 versions 4.4.x through 4.4.3, update to version 4.4.4 or later.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-264

CWE-284

Identificadores relacionados

BDU:2015-01425

BDU:2015-02085

CVE-2010-3714

DSA-2121-1

GHSA-W736-QV86-VQ94

Produtos afetados

Typo3

Referências · 21

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/typo3_sa_2010_020.rb · Exploit
• 🔥 http://exploit-db.com/exploits/15856 · Exploit
• 🔥 https://exploit-db.com/exploits/15856 · Exploit
• https://github.com/TYPO3/typo3 · Nota
• https://github.com/TYPO3/typo3/commit/a8ccd387cafd2c2c338fc29109c16418f7657229 · Nota
• https://github.com/TYPO3/typo3/commit/687b671c765eac10ffb764547bb403ac3ef55620 · Nota
• https://github.com/TYPO3/typo3/commit/d95f06f633fd2c289b544f6d5907b789eae6cccb · Nota
• https://osv.dev/vulnerability/GHSA-w736-qv86-vq94 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-01425 · Nota de Segurança
• http://debian.org/security/dsa-2121 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3716 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3717 · Nota de Segurança
• http://debian.org/security/2010/dsa-2121 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-3714 · Nota de Segurança
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020 · Aviso do Fabricante