TYPO3 Core

references TYPO3 Security Team OTRS issue #2008102610000015

Versions:
4.0 up to trunk (4.0, 4.1, 4.2, trunk)

Problem:
Session IDs are reused by TYPO3 even when they not yet exist in the db but are submitted by a client.

Solution:
Check if there's a session record in the database before using submitted session ids.

Provided by TYPO3 Security Team
(issue imported from #M10146)