CVE-2014-3944
TYPO3 Improper Session Invalidation
EPSS 0.19%
Description
The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors.
How to fix CVE-2014-3944
To remediate CVE-2014-3944, upgrade the affected package to a fixed version below.
- Packagist/typo3/cms—upgrade to 6.2.3 or later
Is CVE-2014-3944 being exploited?
Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- >= 6.2.0, < 6.2.3