CVE-2014-3944

{"id": "CVE-2014-3944", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-06-03T14:55:11.130", "references": [{"url": "http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2014/dsa-2942", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2014/06/03/2", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors."}, {"lang": "es", "value": "El componente de autenticaci\u00f3n en TYPO3 6.2.0 anterior a 6.2.3 no invalida debidamente sesiones de usuario fuera de tiempo, lo que permite a atacantes remotos evadir autenticaci\u00f3n a trav\u00e9s de vectores no especificados."}], "lastModified": "2014-06-04T15:15:16.557", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7715060-1441-4CF9-BEDF-91D28FE31ECC"}, {"criteria": "cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7183456A-52B4-4386-8979-A2ECEA9959FE"}, {"criteria": "cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16EEC79F-3293-451C-864E-9CE020F6C730"}, {"criteria": "cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FD27EAD-04D5-4C55-952E-020954B90CEF"}, {"criteria": "cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99262E73-E4A7-4657-A32E-3C289C052675"}, {"criteria": "cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E230A800-B2DE-4ED4-9C6B-961832C39900"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}