CVE-2014-6292 - The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the

CVE-2014-6292

Summary

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.

References

Vulnerable Configurations

cpe:2.3:a:in2code:femanager:1.0.3:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.3:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.2:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.2:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.1:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.1:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.0:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.0:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.7:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.7:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.5:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.5:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.4:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.4:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.6:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.6:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.8:*:*:*:*:typo3:*:*
cpe:2.3:a:in2code:femanager:1.0.8:*:*:*:*:typo3:*:*

CVSS

Base:	6.4 (as of 03-02-2022 - 19:31)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:P/A:P

refmap via4

confirm	http://typo3.org/extensions/repository/view/femanager
misc	http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002/

Last major update

03-02-2022 - 19:31

Published

03-10-2014 - 14:55

Last modified

03-02-2022 - 19:31