CVE-2014-3945

TYPO3 Authentication bypass (CVE-2014-3945) affects TYPO3 Core prior to 6.2. When password hashing salt is disabled, an attacker who knows a valid password hash can log in without knowing the cleartext password, potentially gaining backend access remotely. This is described across multiple source...