NVD

Id
41897  
Name
CVE-2013-7081  
Description
The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-12-23  
Modified Date
2014-01-13  
Seq
2013-7081  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211537 41897 CVE-2013-7081 [oss-security] 20131211 CVE request: TYPO3-CORE-SA-2013-004 and TYPO3-FLOW-SA-2013-001  View
211538 41897 CVE-2013-7081 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/  View
211539 41897 CVE-2013-7081 DSA-2834  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24132 JVNDB-2013-005707 TYPO3 の (old) Form Content Element コンポーネントにおける任意の HMAC 署名生成される脆弱性 TYPO3 の (old) Form Content Element コンポーネントには、任意の HMAC 署名生成される、およびアクセス制限を回避される脆弱性が存在します。 CVE-2013-7081 67023 CVE-2013-7081 41897 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005707.html 2013-12-10 2013-12-25 View