Description

The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors.

Remediation

References

CVE-2014-3944

Related Vulnerabilities

Oracle HTTP Server Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2015-2808)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33938)

Opencart CVE-2024-21519 Vulnerability (CVE-2024-21519)

WordPress Plugin User Role Editor Security Bypass (4.24)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-31550)

Severity

Medium

Classification

CVE-2014-3944 CWE-287

Tags

Missing Update Known Vulnerabilities