Lucene search

RedhatCVE-2009-3628

HistoryNov 02, 2009 - 3:30 p.m.

CVE-2009-3628

2009-11-0215:30:00

CWE-200

redhat

web.nvd.nist.gov

cve-2009-3628

typo3

encryption key

disclosure

nvd

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

0.002

Percentile

54.7%

JSON

The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element.

Affected configurations

Nvd

Node

typo3typo3Range≤4.0.12

typo3typo3Match0.1.2

typo3typo3Match1.0.14

typo3typo3Match1.1

typo3typo3Match1.1.1

typo3typo3Match1.1.09

typo3typo3Match1.1.10

typo3typo3Match1.2.0

typo3typo3Match1.3.0

typo3typo3Match1.3.2

typo3typo3Match3.0

typo3typo3Match3.3.x

typo3typo3Match3.5

typo3typo3Match3.5.x

typo3typo3Match3.6.x

typo3typo3Match3.7.0

typo3typo3Match3.7.1

typo3typo3Match3.7.x

typo3typo3Match3.8

typo3typo3Match3.8.x

typo3typo3Match4.0

typo3typo3Match4.0.1

typo3typo3Match4.0.2

typo3typo3Match4.0.3

typo3typo3Match4.0.4

typo3typo3Match4.0.5

typo3typo3Match4.0.6

typo3typo3Match4.0.7

typo3typo3Match4.0.8

typo3typo3Match4.0.9

typo3typo3Match4.0.10

typo3typo3Match4.0.11

typo3typo3Match4.1.0

typo3typo3Match4.1.0beta1

typo3typo3Match4.1.0rc1

typo3typo3Match4.1.1

typo3typo3Match4.1.2

typo3typo3Match4.1.3

typo3typo3Match4.1.4

typo3typo3Match4.1.5

typo3typo3Match4.1.6

typo3typo3Match4.1.7

typo3typo3Match4.1.8

typo3typo3Match4.1.9

typo3typo3Match4.1.10

typo3typo3Match4.1.11

typo3typo3Match4.1.12

typo3typo3Match4.2.0

typo3typo3Match4.2.1

typo3typo3Match4.2.2

typo3typo3Match4.2.3

typo3typo3Match4.2.4

typo3typo3Match4.2.5

typo3typo3Match4.2.6

typo3typo3Match4.2.7

typo3typo3Match4.2.8

typo3typo3Match4.2.9

typo3typo3Match4.3

typo3typo3Match4.3alpha1

VendorProductVersionCPE
typo3typo3*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
typo3typo30.1.2cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*
typo3typo31.0.14cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*
typo3typo31.1cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*
typo3typo31.1.1cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*
typo3typo31.1.09cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*
typo3typo31.1.10cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*
typo3typo31.2.0cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*
typo3typo31.3.0cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*
typo3typo31.3.2cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
typo3	typo3	*	cpe:2.3:a:typo3:typo3::::::::
typo3	typo3	0.1.2	cpe:2.3:a:typo3:typo3:0.1.2:::::::*
typo3	typo3	1.0.14	cpe:2.3:a:typo3:typo3:1.0.14:::::::*
typo3	typo3	1.1	cpe:2.3:a:typo3:typo3:1.1:::::::*
typo3	typo3	1.1.1	cpe:2.3:a:typo3:typo3:1.1.1:::::::*
typo3	typo3	1.1.09	cpe:2.3:a:typo3:typo3:1.1.09:::::::*
typo3	typo3	1.1.10	cpe:2.3:a:typo3:typo3:1.1.10:::::::*
typo3	typo3	1.2.0	cpe:2.3:a:typo3:typo3:1.2.0:::::::*
typo3	typo3	1.3.0	cpe:2.3:a:typo3:typo3:1.3.0:::::::*
typo3	typo3	1.3.2	cpe:2.3:a:typo3:typo3:1.3.2:::::::*