Lucene search

K
cveMitreCVE-2012-5890
HistoryNov 17, 2012 - 9:55 p.m.

CVE-2012-5890

2012-11-1721:55:01
CWE-200
mitre
web.nvd.nist.gov
24
typo3
front end
user registration
extension
remote attackers
credentials
security vulnerability
cve-2012-5890

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.004

Percentile

72.2%

The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.

Affected configurations

Nvd
Node
stanislas_rollandsr_feuser_registerRange2.6.1
OR
stanislas_rollandsr_feuser_registerMatch1.4.7
OR
stanislas_rollandsr_feuser_registerMatch1.6.5
OR
stanislas_rollandsr_feuser_registerMatch1.6.6
OR
stanislas_rollandsr_feuser_registerMatch1.6.7
OR
stanislas_rollandsr_feuser_registerMatch1.6.8
OR
stanislas_rollandsr_feuser_registerMatch2.0.0
OR
stanislas_rollandsr_feuser_registerMatch2.1.0
OR
stanislas_rollandsr_feuser_registerMatch2.2.0
OR
stanislas_rollandsr_feuser_registerMatch2.2.1
OR
stanislas_rollandsr_feuser_registerMatch2.2.3
OR
stanislas_rollandsr_feuser_registerMatch2.2.4
OR
stanislas_rollandsr_feuser_registerMatch2.2.5
OR
stanislas_rollandsr_feuser_registerMatch2.3.0
OR
stanislas_rollandsr_feuser_registerMatch2.3.3
OR
stanislas_rollandsr_feuser_registerMatch2.3.4
OR
stanislas_rollandsr_feuser_registerMatch2.3.5
OR
stanislas_rollandsr_feuser_registerMatch2.3.6
OR
stanislas_rollandsr_feuser_registerMatch2.4
OR
stanislas_rollandsr_feuser_registerMatch2.5
OR
stanislas_rollandsr_feuser_registerMatch2.5.1
OR
stanislas_rollandsr_feuser_registerMatch2.5.2
OR
stanislas_rollandsr_feuser_registerMatch2.5.3
OR
stanislas_rollandsr_feuser_registerMatch2.5.4
OR
stanislas_rollandsr_feuser_registerMatch2.5.5
OR
stanislas_rollandsr_feuser_registerMatch2.5.6
OR
stanislas_rollandsr_feuser_registerMatch2.5.11
OR
stanislas_rollandsr_feuser_registerMatch2.5.12
OR
stanislas_rollandsr_feuser_registerMatch2.5.13
OR
stanislas_rollandsr_feuser_registerMatch2.5.14
OR
stanislas_rollandsr_feuser_registerMatch2.5.15
OR
stanislas_rollandsr_feuser_registerMatch2.5.16
OR
stanislas_rollandsr_feuser_registerMatch2.5.1718
OR
stanislas_rollandsr_feuser_registerMatch2.5.19
OR
typo3typo3Match-
VendorProductVersionCPE
stanislas_rollandsr_feuser_register*cpe:2.3:a:stanislas_rolland:sr_feuser_register:*:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register1.4.7cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.4.7:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register1.6.5cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.5:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register1.6.6cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.6:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register1.6.7cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.7:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register1.6.8cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.8:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register2.0.0cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.0.0:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register2.1.0cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.1.0:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register2.2.0cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.0:*:*:*:*:*:*:*
stanislas_rollandsr_feuser_register2.2.1cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 351

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.004

Percentile

72.2%

Related for CVE-2012-5890