PT-2014-7132 · Typo3 · Powermail

Jigal Van Hemert · Publicado 2014-10-03 · Atualizado 2022-05-17 · CVE-2014-6288

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions powermail extension versions 2.0.0 through 2.0.10

Description The issue allows remote attackers to bypass the CAPTCHA protection mechanism.

Recommendations For powermail extension versions 2.0.0 through 2.0.10, update to version 2.0.11 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

CWE-264

Identificadores relacionados

CVE-2014-6288

GHSA-2JQ7-PGQQ-GQQJ

Produtos afetados

Powermail

Referências · 6

• https://github.com/in2code-de/powermail · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-6288 · Nota de Segurança
• https://typo3.org/security/advisory/typo3-ext-sa-2014-006 · Nota
• http://typo3.org/extensions/repository/view/powermail · Nota
• https://osv.dev/vulnerability/GHSA-2jq7-pgqq-gqqj · Aviso do Fabricante
• http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-006 · Aviso do Fabricante