Description

The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.

Remediation

References

CVE-2009-0255

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2963)

WordPress Plugin WordPress Related Posts Cross-Site Request Forgery (2.6.1)

Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6379)

Microsoft SQL Server CVE-2023-23384 Vulnerability (CVE-2023-23384)

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-13136)

Severity

Medium

Classification

CVE-2009-0255

Tags

Missing Update Known Vulnerabilities