CVE-2012-5890: Infoleak
Published Nov 17, 2012
·Updated
The Front End User Registration (srfeuserregister) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.
Affected Software
36 affected componentsFixes available
Stanislas Rolland Sr Feuser Register<=2.6.1
Stanislas Rolland Sr Feuser Register=1.4.7
Stanislas Rolland Sr Feuser Register=1.6.5
Stanislas Rolland Sr Feuser Register=1.6.6
Stanislas Rolland Sr Feuser Register=1.6.7
Stanislas Rolland Sr Feuser Register=1.6.8
Stanislas Rolland Sr Feuser Register=2.0.0
Stanislas Rolland Sr Feuser Register=2.1.0
Stanislas Rolland Sr Feuser Register=2.2.0
Stanislas Rolland Sr Feuser Register=2.2.1
Stanislas Rolland Sr Feuser Register=2.2.3
Stanislas Rolland Sr Feuser Register=2.2.4
Stanislas Rolland Sr Feuser Register=2.2.5
Stanislas Rolland Sr Feuser Register=2.3.0
Stanislas Rolland Sr Feuser Register=2.3.3
Stanislas Rolland Sr Feuser Register=2.3.4
Stanislas Rolland Sr Feuser Register=2.3.5
Stanislas Rolland Sr Feuser Register=2.3.6
Stanislas Rolland Sr Feuser Register=2.4
Stanislas Rolland Sr Feuser Register=2.5
Stanislas Rolland Sr Feuser Register=2.5.1
Stanislas Rolland Sr Feuser Register=2.5.2
Stanislas Rolland Sr Feuser Register=2.5.3
Stanislas Rolland Sr Feuser Register=2.5.4
Stanislas Rolland Sr Feuser Register=2.5.5
Stanislas Rolland Sr Feuser Register=2.5.6
Stanislas Rolland Sr Feuser Register=2.5.11
Stanislas Rolland Sr Feuser Register=2.5.12
Stanislas Rolland Sr Feuser Register=2.5.13
Stanislas Rolland Sr Feuser Register=2.5.14
Stanislas Rolland Sr Feuser Register=2.5.15
Stanislas Rolland Sr Feuser Register=2.5.16
Stanislas Rolland Sr Feuser Register=2.5.17-18
Stanislas Rolland Sr Feuser Register=2.5.19
Typo3 TYPO3
composer/sjbr/sr-feuser-register<2.6.2
2.6.2
Remediation
Event History
Nov 17, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·01:38 AM
Frequently Asked Questions
1
What is the severity of CVE-2012-5890?
CVE-2012-5890 is considered to have a medium severity due to its potential for unauthorized access to user credentials.
2
How do I fix CVE-2012-5890?
To fix CVE-2012-5890, update the sr_feuser_register extension to version 2.6.2 or later.
3
What software is affected by CVE-2012-5890?
CVE-2012-5890 affects the sr_feuser_register extension versions prior to 2.6.2 for TYPO3.
4
Can CVE-2012-5890 be exploited remotely?
Yes, CVE-2012-5890 can be exploited remotely to obtain user names and passwords.
5
What features are vulnerable in CVE-2012-5890?
The vulnerabilities in CVE-2012-5890 are found in the edit perspective and autologin feature of the sr_feuser_register extension.