Lucene search
Veracode Vulnerability DatabaseVERACODE:47313HistoryJun 03, 2024 - 7:21 a.m.
Insecure Credential Storage
2024-06-0307:21:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
typo3
cms
core
vulnerability
insecure credential storage
database records
user account types
attacker
7 High
AI Score
Confidence
High
typo3/cms-core is vulnerable to Insecure Credential Storage. The vulnerability is due to the persistence of database records containing insecure or empty credentials when certain changes are made to user account types in the TYPO3 backend, which allows an attacker to cause insecure or empty credentials to be persisted in user accounts.
7 High
AI Score
Confidence
High