Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-3628
HistoryNov 02, 2009 - 12:00 a.m.

CVE-2009-3628

2009-11-0200:00:00
ubuntu.com
ubuntu.com
12

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

0.002

Percentile

54.7%

The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13,
4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated
users to determine an encryption key via crafted input to a tt_content form
element.

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

0.002

Percentile

54.7%