« Volver al listado

CVE-2010-1022

Estado: ModificadaAlta (7.5)—

The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Marcus Krause — T3sec Saltedpw

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-1022",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-03-19T19:00:00.967",
  "references": [
    {
      "url": "http://secunia.com/advisories/38992",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://typo3.org/extensions/repository/view/t3sec_saltedpw/0.2.13/",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/38799",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/38992",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://typo3.org/extensions/repository/view/t3sec_saltedpw/0.2.13/",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38799",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "La extensión TYPO3 Security - Salted user password hashes (t3sec_saltedpw) anterior a v0.2.13 para TYPO3 permite a atacantes remotos evitar la autenticación a través de vectores deconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:17:21.763",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:marcus_krause:t3sec_saltedpw:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32737500-8D39-4F6A-8273-4C4714D908B1",
              "versionEndIncluding": "0.2.12"
            },
            {
              "criteria": "cpe:2.3:a:marcus_krause:t3sec_saltedpw:0.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B582CCD-91B8-41EF-BA78-8BDEA0174E5F"
            },
            {
              "criteria": "cpe:2.3:a:marcus_krause:t3sec_saltedpw:0.2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4ED4A570-03C1-4157-93C2-BC54305F15C4"
            },
            {
              "criteria": "cpe:2.3:a:marcus_krause:t3sec_saltedpw:0.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D764C00-87CD-49D1-AE2C-D5D543C8FF81"
            },
            {
              "criteria": "cpe:2.3:a:marcus_krause:t3sec_saltedpw:0.2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96EC015D-C0AC-44A4-B854-4787594C0764"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}