Actions
Bug #21335
closed
Knowing the md5 hash of the password, it is possible to gain access to the install tool
Start date:
2009-10-22
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
4.2
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
Solution is to use PHP sessions instead and make these "secure".
Reported by: Bernhard Kraft
Security Team OTRS reference: 2009050410000038
(issue imported from #M12309)
Updated by
Actions