CVE-2017-6370: Cleartext Transmission of Sensitive Information

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields...

PT-2017-17023

Name of the Vulnerable Software and Affected Versions TYPO3 version 7.6.15 Description The issue allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields. This occurs when TYPO3 sends an HTTP request to an...