Lucene search

MitreCVE-2012-1079

HistoryFeb 14, 2012 - 5:55 p.m.

CVE-2012-1079

2012-02-1417:55:03

mitre

web.nvd.nist.gov

cve-2012-1079

typo3

webservices

vulnerability

remote code execution

authenticated users

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.011

Percentile

84.6%

JSON

Unspecified vulnerability in the Webservices for TYPO3 (typo3_webservice) extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors.

Affected configurations

Nvd

Node

helmut_hummeltypo3_webserviceRange≤0.3.7

helmut_hummeltypo3_webserviceMatch0.3.3

helmut_hummeltypo3_webserviceMatch0.3.4

helmut_hummeltypo3_webserviceMatch0.3.5

helmut_hummeltypo3_webserviceMatch0.3.6

AND

typo3typo3

VendorProductVersionCPE
helmut_hummeltypo3_webservice*cpe:2.3:a:helmut_hummel:typo3_webservice:*:*:*:*:*:*:*:*
helmut_hummeltypo3_webservice0.3.3cpe:2.3:a:helmut_hummel:typo3_webservice:0.3.3:*:*:*:*:*:*:*
helmut_hummeltypo3_webservice0.3.4cpe:2.3:a:helmut_hummel:typo3_webservice:0.3.4:*:*:*:*:*:*:*
helmut_hummeltypo3_webservice0.3.5cpe:2.3:a:helmut_hummel:typo3_webservice:0.3.5:*:*:*:*:*:*:*
helmut_hummeltypo3_webservice0.3.6cpe:2.3:a:helmut_hummel:typo3_webservice:0.3.6:*:*:*:*:*:*:*
typo3typo3*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
helmut_hummel	typo3_webservice	*	cpe:2.3:a:helmut_hummel:typo3_webservice::::::::
helmut_hummel	typo3_webservice	0.3.3	cpe:2.3:a:helmut_hummel:typo3_webservice:0.3.3:::::::*
helmut_hummel	typo3_webservice	0.3.4	cpe:2.3:a:helmut_hummel:typo3_webservice:0.3.4:::::::*
helmut_hummel	typo3_webservice	0.3.5	cpe:2.3:a:helmut_hummel:typo3_webservice:0.3.5:::::::*
helmut_hummel	typo3_webservice	0.3.6	cpe:2.3:a:helmut_hummel:typo3_webservice:0.3.6:::::::*
typo3	typo3	*	cpe:2.3:a:typo3:typo3::::::::

References

osvdb.org/78792

typo3.org/extensions/repository/view/typo3_webservice/0.3.8/

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/

www.securityfocus.com/bid/51843

exchange.xforce.ibmcloud.com/vulnerabilities/72965

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.011

Percentile

84.6%

JSON

Related for CVE-2012-1079