CVE-2009-0256

Published: Jan 22, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.

Affected (24)

Products: Typo3: Typo3

Typo3

1 product

Typo3

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Typo3 Typo3	Version 4.0.1
Typo3 Typo3	Version 4.0.2
Typo3 Typo3	Version 4.0.3
Typo3 Typo3	Version 4.0.4
Typo3 Typo3	Version 4.0.5
Typo3 Typo3	Version 4.0.6
Typo3 Typo3	Version 4.0.7
Typo3 Typo3	Version 4.0.8
Typo3 Typo3	Version 4.0.9
Typo3 Typo3	Version 4.0
Typo3 Typo3	Version 4.1.0
Typo3 Typo3	Version 4.1.0 beta1
Typo3 Typo3	Version 4.1.0 rc1
Typo3 Typo3	Version 4.1.1
Typo3 Typo3	Version 4.1.2
Typo3 Typo3	Version 4.1.3
Typo3 Typo3	Version 4.1.4
Typo3 Typo3	Version 4.1.5
Typo3 Typo3	Version 4.1.6
Typo3 Typo3	Version 4.1.7
Typo3 Typo3	Version 4.2.0
Typo3 Typo3	Version 4.2.1
Typo3 Typo3	Version 4.2.2
Typo3 Typo3	Version 4.2.3