CVE-2011-4628: Typo3 Authentication Bypass
Typo3 Authentication Bypass
Other sources
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms in the backend through a crafted request.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/typo3/cmsto a version that resolves this vulnerability.Fixed in 4.5.4 - Upgrade
Upgrade
composer/typo3/cmsto a version that resolves this vulnerability.Fixed in 4.4.9 - Upgrade
Upgrade
composer/typo3/cmsto a version that resolves this vulnerability.Fixed in 4.3.12
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4628?
CVE-2011-4628 is classified as a medium severity vulnerability due to its potential for unauthorized access through authentication bypass.
How do I fix CVE-2011-4628?
To fix CVE-2011-4628, upgrade TYPO3 to version 4.3.12, 4.4.9, or 4.5.4 or later.
Who is affected by CVE-2011-4628?
CVE-2011-4628 affects users of TYPO3 versions before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4.
What type of vulnerability is CVE-2011-4628?
CVE-2011-4628 is an authentication bypass vulnerability that allows remote attackers to exploit backend security mechanisms.
Can CVE-2011-4628 be exploited remotely?
Yes, CVE-2011-4628 can be exploited remotely by sending a crafted request to the TYPO3 backend.