PT-2014-7136 · Typo3 · Femanager

Publicado 2014-10-03 · Atualizado 2022-05-13 · CVE-2014-6292

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions femanager extension versions prior to 1.0.9

Description The issue allows remote frontend users to modify or delete the records of other frontend users.

Recommendations For versions prior to 1.0.9, update to version 1.0.9 or later to resolve the issue.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2014-6292

GHSA-377V-8637-6VQ6

Produtos afetados

Femanager

Referências · 6

• https://github.com/in2code-de/femanager · Nota
• http://typo3.org/extensions/repository/view/femanager · Correção
• http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002 · Aviso do Fabricante
• https://typo3.org/security/advisory/typo3-ext-sa-2014-002 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-6292 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-377v-8637-6vq6 · Aviso do Fabricante