6.4

CVE-2014-6292

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
In2code ≫ Femanager SwPlatform typo3 Version <= 1.0.8
In2code ≫ Femanager Version 1.0.0 SwPlatform typo3
In2code ≫ Femanager Version 1.0.1 SwPlatform typo3
In2code ≫ Femanager Version 1.0.2 SwPlatform typo3
In2code ≫ Femanager Version 1.0.3 SwPlatform typo3
In2code ≫ Femanager Version 1.0.4 SwPlatform typo3
In2code ≫ Femanager Version 1.0.5 SwPlatform typo3
In2code ≫ Femanager Version 1.0.6 SwPlatform typo3
In2code ≫ Femanager Version 1.0.7 SwPlatform typo3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.33% 0.674
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:N/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002/
Patch
Vendor Advisory
http://typo3.org/extensions/repository/view/femanager
Patch