Actions
Bug #21335
closed
Knowing the md5 hash of the password, it is possible to gain access to the install tool
Start date:
2009-10-22
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
4.2
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
Solution is to use PHP sessions instead and make these "secure".
Reported by: Bernhard Kraft
Security Team OTRS reference: 2009050410000038
(issue imported from #M12309)
Updated by Ernesto Baschny about 15 years ago
Commited to:
trunk (rev.6252 = beta2)
TYPO3_4-2 (rev.6253 = 4.2.10)
TYPO3_4-1 (rev.6254 = 4.1.11)
Actions