Lucene search

K
cveMitreCVE-2012-1078
HistoryFeb 14, 2012 - 5:55 p.m.

CVE-2012-1078

2012-02-1417:55:03
CWE-264
mitre
web.nvd.nist.gov
31
typo3
sysutils
extension
sensitive information disclosure
cve-2012-1078
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

74.7%

The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper “protection” of the “backup output directory.”

Affected configurations

Nvd
Node
claus_duesysutilsRange1.0.3
OR
claus_duesysutilsMatch0.10.0
OR
claus_duesysutilsMatch1.0.0
OR
claus_duesysutilsMatch1.0.1
OR
claus_duesysutilsMatch1.0.2
AND
typo3typo3
VendorProductVersionCPE
claus_duesysutils*cpe:2.3:a:claus_due:sysutils:*:*:*:*:*:*:*:*
claus_duesysutils0.10.0cpe:2.3:a:claus_due:sysutils:0.10.0:*:*:*:*:*:*:*
claus_duesysutils1.0.0cpe:2.3:a:claus_due:sysutils:1.0.0:*:*:*:*:*:*:*
claus_duesysutils1.0.1cpe:2.3:a:claus_due:sysutils:1.0.1:*:*:*:*:*:*:*
claus_duesysutils1.0.2cpe:2.3:a:claus_due:sysutils:1.0.2:*:*:*:*:*:*:*
typo3typo3*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

74.7%

Related for CVE-2012-1078