Description
Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities during authentication.
References
- ADV-2010-0127 vdb-entry
- typo3-openid-security-bypass(55609) vdb-entry
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-001/
- 38206 third-party-advisory
- 61680 vdb-entry