CVE-2014-3945 in TYPO3
Summary
The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash.
Reservation
06/03/2014
Disclosure
06/03/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13346 | TYPO3 Authentication improper authentication | 287 | Proof-of-Concept | Official fix | CVE-2014-3945 |