Lucene search
Veracode Vulnerability DatabaseVERACODE:27973HistoryNov 24, 2020 - 6:15 a.m.
Information Disclosure
2020-11-2406:15:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
48.5%
typo3/cms-core is vulnerable to information disclosure. The vulnerability exists as the persisted user session identifiers are stored in cleartext.
| CPE | Name | Operator | Version |
|---|---|---|---|
| typo3/cms-core | le | 10.4.9 | |
| typo3/cms-core | le | 9.5.22 | |
| typo3/cms-core | le | 8.7.32 |
Related
prion
prion
Sql injection
2020-11-23 21:15:00
cvelist
cvelist
CVE-2020-26228 Cleartext storage of session identifier
2020-11-23 21:10:16
typo3
typo3
Cleartext storage of session identifier
2020-11-17 00:00:00
friendsofphp
friendsofphp
TYPO3-CORE-SA-2020-011: Cleartext storage of session identifier
2020-11-17 08:50:08
TYPO3-CORE-SA-2020-011: Cleartext storage of session identifier
2020-11-17 08:50:08
osv
osv
Cleartext storage of session identifier
2020-11-23 21:18:36
BIT-typo3-2020-26228
2024-03-06 11:11:34
CVE-2020-26228
2020-11-23 21:15:12
nvd
nvd
CVE-2020-26228
2020-11-23 21:15:12
cve
cve
CVE-2020-26228
2020-11-23 21:15:12
github
github
Cleartext storage of session identifier
2020-11-23 21:18:36
openvas
openvas