CVE-2010-1022

Published: Mar 19, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors.

Affected (5)

Products: Marcus Krause: T3sec Saltedpw

1 product

Configuration A

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marcus Krause T3sec Saltedpw	Up to 0.2.12
Marcus Krause T3sec Saltedpw	Version 0.2.10
Marcus Krause T3sec Saltedpw	Version 0.2.11
Marcus Krause T3sec Saltedpw	Version 0.2.8
Marcus Krause T3sec Saltedpw	Version 0.2.9

Running on/with	Platform Versions
Typo3 Typo3	All versions

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (8)

http://secunia.com/advisories/38992

Source: cve@mitre.org

Vendor Advisory

http://typo3.org/extensions/repository/view/t3sec_saltedpw/0.2.13/

Source: cve@mitre.org

Patch

http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/38799

Source: cve@mitre.org

http://secunia.com/advisories/38992

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://typo3.org/extensions/repository/view/t3sec_saltedpw/0.2.13/

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/38799

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.