PT-2017-6486

CVE-2015-1401

Published

2017-08-28

Updated

2017-09-08

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TYPO3 extension "LDAP / SSO Authentication" (ig ldap sso auth) version 2.0.0

Description The issue is related to an Improper Authentication vulnerability in the "LDAP / SSO Authentication" extension for TYPO3.

Recommendations For version 2.0.0 of the "LDAP / SSO Authentication" extension, update to a newer version that contains a fix for this issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾