CVE-2010-3670: TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.
Other sources
TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/typo3/cms-frontendto a version that resolves this vulnerability.Fixed in 4.4.1 - Upgrade
Upgrade
composer/typo3/cms-frontendto a version that resolves this vulnerability.Fixed in 4.3.4
Event History
Frequently Asked Questions
What is the vulnerability ID for this TYPO3 issue?
The vulnerability ID for this TYPO3 issue is CVE-2010-3670.
What is the severity of CVE-2010-3670?
The severity of CVE-2010-3670 is medium.
What is the description of CVE-2010-3670?
CVE-2010-3670 is a vulnerability in TYPO3 before 4.3.4 and 4.4.x before 4.4.1 that contains insecure randomness during generation of a hash with the "forgot password" function.
What is the affected software for CVE-2010-3670?
The affected software for CVE-2010-3670 is TYPO3 versions up to 4.3.4 and TYPO3 versions up to 4.4.1.
Where can I find more information about CVE-2010-3670?
You can find more information about CVE-2010-3670 on the Debian Security Tracker and TYPO3 security advisory websites.