CVE-2010-4068: Input Validation

Published Oct 25, 2010

Updated

Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.

Affected Software

26 affected components

Typo3 TYPO3=4.2.10

Typo3 TYPO3=4.3.6

Typo3 TYPO3=4.2.14

Typo3 TYPO3=4.3.5

Typo3 TYPO3=4.2.4

Typo3 TYPO3=4.2.5

Typo3 TYPO3=4.2.11

Typo3 TYPO3=4.2.0

Typo3 TYPO3=4.2.8

Typo3 TYPO3=4.2.13

Typo3 TYPO3=4.2.3

Typo3 TYPO3=4.2.1

Typo3 TYPO3=4.3.2

Typo3 TYPO3=4.4.1

Typo3 TYPO3=4.4.2

Typo3 TYPO3=4.2.12

Typo3 TYPO3=4.2.6

Typo3 TYPO3=4.3.0

Typo3 TYPO3=4.2.2

Typo3 TYPO3=4.3.3

Typo3 TYPO3=4.3.4

Typo3 TYPO3=4.4

Typo3 TYPO3=4.3.1

Typo3 TYPO3=4.2.7

Typo3 TYPO3=4.4.3

Typo3 TYPO3=4.2.9

Event History

Oct 25, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4068?

CVE-2010-4068 is classified as a moderate severity vulnerability due to its potential for unauthorized file access by authenticated administrators.

How do I fix CVE-2010-4068?

To fix CVE-2010-4068, upgrade TYPO3 to versions 4.2.15, 4.3.7, or 4.4.4 or later.

Who is affected by CVE-2010-4068?

CVE-2010-4068 affects TYPO3 versions 4.2.x prior to 4.2.15, 4.3.x prior to 4.3.7, and 4.4.x prior to 4.4.4.

What type of vulnerability is CVE-2010-4068?

CVE-2010-4068 is an arbitrary file reading and possibly modifying vulnerability in TYPO3's Extension Manager.

Is CVE-2010-4068 related to any other vulnerabilities?

Yes, CVE-2010-4068 is a different vulnerability from CVE-2010-3714 in that it pertains to remote authenticated administrators.