Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-2047
2.6
LOWCVSS v2
Severity scale
010
Description
The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured for the frontend, allows remote attackers to bypass authentication via a password that is casted to an empty value.
TYPO3/typo3
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS= 4.3.6, = 4.5.30, = 4.5.3, = 4.6.16, = 4.5.27, = 4.3.5, = 4.5.9, = 4.3.8, = 4.5.12, = 4.4.13, = 4.5.5, = 4.5.13, = 4.5.38, = 4.6.6, = 4.6.13, = 4.4.14, = 4.5.15, = 4.5.24, = 4.5.32, = 4.6.8, = 4.6.17, = 4.6.3, = 4.6.12, = 4.3.7, = 4.3.14, = 4.5.17, = 4.5.35, = 4.3.2, = 4.3.3, = 4.3.10, = 4.3.11, = 4.4.4, = 4.4.5, = 4.5.14, = 4.5.21, = 4.5.29, = 4.6.5, = 4.3.0, = 4.3.9, = 4.4.1, = 4.4.2, = 4.3.13, = 4.4.6, = 4.4.7, = 4.4.15, = 4.5.6, = 4.5.7, = 4.5.23, = 4.5.31, = 4.6, = 4.6.0, = 4.6.15, = 4.4.11, = 4.5.11, = 4.5.20, = 4.5.36, = 4.5.37, = 4.5.0, = 4.5.8, = 4.5.18, = 4.5.26, = 4.6.10, = 4.6.18, = 4.4.12, = 4.5.4, = 4.5.22, = 4.5.39, = 4.3.1, = 4.4.3, = 4.3.4, = 4.3.12, = 4.5.16, = 4.5.33, = 4.6.7, = 4.6.14, = 4.4.10, = 4.5.2, = 4.5.19, = 4.5.28, = 4.6.4, = 4.6.11, = 4.4.0, = 4.4.8, = 4.4.9, = 4.5.1, = 4.5.10, = 4.5.25, = 4.5.34, = 4.6.1, = 4.6.2, = 4.6.9NVD