Upstream information
Description
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having moderate severity.
National Vulnerability Database | |
---|---|
Base Score | 4 |
Vector | AV:N/AC:L/Au:S/C:P/I:N/A:N |
Access Vector | Network |
Access Complexity | Low |
Authentication | Single |
Confidentiality Impact | Partial |
Integrity Impact | None |
Availability Impact | None |
- openSUSE-SU-2016:2025-1, published Wed, 10 Aug 2016 22:09:17 +0200 (CEST)
- openSUSE-SU-2016:2114-1, published Fri, 19 Aug 2016 19:09:32 +0200 (CEST)
- openSUSE-SU-2016:2169-1, published Mon, 29 Aug 2016 11:09:56 +0200 (CEST)