Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2014-8327

The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

PublishedOct 27, 2014, 15:55

Published Bycve@mitre.org

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

co-stack/fal_sftp(Packagist)00.2.6N/A

vertexvaar/falsftp(Packagist)00.2.6N/A

References

http://typo3.org/extensions/repository/view/fal_sftp
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-014/
https://exchange.xforce.ibmcloud.com/vulnerabilities/97668

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:S/C:P/I:N/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)