CVE

Id
42870  
CVE No.
CVE-2010-0286  
Status
Candidate  
Description
Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities during authentication.  
Phase
Assigned (20100112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
467406 42870 CVE-2010-0286 CONFIRM:http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-001/  View
467407 42870 CVE-2010-0286 OSVDB:61680  View
467408 42870 CVE-2010-0286 URL:http://osvdb.org/61680  View
467409 42870 CVE-2010-0286 SECUNIA:38206  View
467410 42870 CVE-2010-0286 URL:http://secunia.com/advisories/38206  View
467411 42870 CVE-2010-0286 VUPEN:ADV-2010-0127  View
467412 42870 CVE-2010-0286 URL:http://www.vupen.com/english/advisories/2010/0127  View
467413 42870 CVE-2010-0286 XF:typo3-openid-security-bypass(55609)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35282 JVNDB-2010-001062 ISC BIND における DNS キャッシュ汚染の脆弱性 ISC BIND には、DNSSEC 検証が有効に設定されている、または Checking Disabled (CD) ビットがセットされている場合、DNS キャッシュ汚染攻撃を実行される脆弱性が存在します。 CVE-2010-0290 42870 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001062.html  View