CVE-2014-8327

The CVE-2014-8327 issue affects the TYPO3 fal_sftp extension prior to 0.2.6, where configured permissions for sFTP driver files/folders are weak, allowing remote authenticated users to obtain sensitive information via unspecified vectors. TYPO3 security bulletins and related advisories confirm th...

Improper Access Control vulnerability in extension fal_sftp (fal_sftp)

It has been discovered that the extension "falsftp" falsftp is susceptible to Improper Access Control. Release Date: October 17, 2014 Bulletin Update: October 18, 2014 added CVE Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Version...