CVE-2017-6370 | BDVDB-2026-82933 Detail

Description#

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/97071
https://github.com/faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request

Exploit#

No public exploit known

History#

Version 12017-03-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.