Vulnerability Description
The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.
CVSS Score
6.4
MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| In2Code | Femanager | <= 1.0.8 |
References
- http://typo3.org/extensions/repository/view/femanagerPatch
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-saPatchVendor Advisory
- http://typo3.org/extensions/repository/view/femanagerPatch
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-saPatchVendor Advisory
FAQ
What is CVE-2014-6292?
CVE-2014-6292 is a vulnerability with a CVSS score of 6.4 (MEDIUM). The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.
How severe is CVE-2014-6292?
CVE-2014-6292 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-6292?
Check the references section above for vendor advisories and patch information. Affected products include: In2Code Femanager.