Lucene search
Veracode Vulnerability DatabaseVERACODE:29811HistoryMar 24, 2021 - 5:08 a.m.
Information Disclosure
2021-03-2405:08:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
53.7%
typo3/cms-core is vulnerable to information disclosure. User session identifiers were stored in cleartext and allows any user to retrieve the session identifiers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| typo3/cms-core | le | v9.5.24 | |
| typo3/cms-core | le | v8.7.32 | |
| typo3/cms-core | le | v10.4.13 | |
| typo3/cms-core | le | v11.1.0 |
Related
cve
cve
CVE-2021-21339
2021-03-23 02:15:12
osv
osv
Cleartext storage of session identifier
2021-03-23 01:53:42
CVE-2021-21339
2021-03-23 02:15:12
BIT-typo3-2021-21339
2024-03-06 11:11:19
cvelist
cvelist
CVE-2021-21339 Cleartext storage of session identifier
2021-03-23 01:50:40
nvd
nvd
CVE-2021-21339
2021-03-23 02:15:12
friendsofphp
friendsofphp
TYPO3-CORE-SA-2021-006: Cleartext storage of session identifier
2021-03-16 08:58:23
TYPO3-CORE-SA-2021-006: Cleartext storage of session identifier
2021-03-16 08:58:23
github
github
Cleartext storage of session identifier
2021-03-23 01:53:42
prion
prion
Sql injection
2021-03-23 02:15:00
typo3
typo3
Cleartext storage of session identifier
2021-03-16 00:00:00
openvas
openvas