CVE-2015-2047

Published Feb 23, 2015 CVSS 2.0 · 2.6 Low EPSS 1.5% KEV · Not listed
Description
The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured for the frontend, allows remote attackers to bypass authentication via a password that is casted to an empty value.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2015-2160 The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured for the frontend, allows remote attackers to bypass authentication via a password that is casted to an empty value.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
debian
Published
Updated
Aug 6, 2024, 5:02 AM
Reserved
Feb 22, 2015, 12:00 AM
Status
Modified
Published
Feb 23, 2015, 5:59 PM
Modified
Jun 17, 2026, 12:23 AM