CVE-2017-6370

N/A

Description

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

Details CVE

Score CVSS v3.1N/A

Publie3/17/2017

Derniere modification4/20/2025

Sourcenvd

Observations honeypot0

Produits affectes

typo3:typo3

Faiblesses (CWE)

CWE-319

References

http://www.securityfocus.com/bid/97071(cve@mitre.org)

https://github.com/faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request(cve@mitre.org)

http://www.securityfocus.com/bid/97071(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.