Lucene search

[email protected]CVE-2012-1078

HistoryFeb 14, 2012 - 5:55 p.m.

CVE-2012-1078

2012-02-1417:55:03

CWE-264

[email protected]

web.nvd.nist.gov

typo3

sysutils

extension

sensitive information disclosure

cve-2012-1078

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper “protection” of the “backup output directory.”

Affected configurations

NVD

Node

claus_duesysutilsRange≤1.0.3

claus_duesysutilsMatch0.10.0

claus_duesysutilsMatch1.0.0

claus_duesysutilsMatch1.0.1

claus_duesysutilsMatch1.0.2

AND

typo3typo3

CPENameOperatorVersion
claus_due:sysutilsclaus due sysutilsle1.0.3
claus_due:sysutilsclaus due sysutilseq0.10.0
claus_due:sysutilsclaus due sysutilseq1.0.0
claus_due:sysutilsclaus due sysutilseq1.0.1
claus_due:sysutilsclaus due sysutilseq1.0.2

CPE	Name	Operator	Version
claus_due:sysutils	claus due sysutils	le	1.0.3
claus_due:sysutils	claus due sysutils	eq	0.10.0
claus_due:sysutils	claus due sysutils	eq	1.0.0
claus_due:sysutils	claus due sysutils	eq	1.0.1
claus_due:sysutils	claus due sysutils	eq	1.0.2

References

typo3.org/extensions/repository/view/sysutils/1.0.4/

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/

www.osvdb.org/78791

www.securityfocus.com/bid/51844

exchange.xforce.ibmcloud.com/vulnerabilities/72964

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

Related for CVE-2012-1078

cvelist1 nvd1 prion1