CVE-2009-4162: High severity mauro lorenzutti wfqbe vulnerability
Published Dec 2, 2009
·Updated
Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors.
Affected Software
2 affected components
Mauro Lorenzutti Wfqbe=1.3.1
Typo3 TYPO3
Remediation
Event History
Dec 2, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4162?
CVE-2009-4162 is classified as a high severity vulnerability due to its potential to allow local users to execute arbitrary commands.
2
How do I fix CVE-2009-4162?
To fix CVE-2009-4162, update to the latest version of the wfqbe extension, ensuring you are above version 1.3.1.
3
Who is affected by CVE-2009-4162?
Local users of TYPO3 versions using the wfqbe extension 1.3.1 or earlier are affected by CVE-2009-4162.
4
What types of attacks can CVE-2009-4162 facilitate?
CVE-2009-4162 can facilitate unauthorized execution of commands on a vulnerable system.
5
Is there a patch available for CVE-2009-4162?
Yes, to mitigate CVE-2009-4162, a security patch is included in subsequent updates to the wfqbe extension.