CVE-2010-3670 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4.8 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 34%

Vendor	Product	Version
typo3	typo3	𝑥 < 4.3.4
typo3	typo3	4.4.0 ≤ 𝑥 < 4.4.1

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

typo3-src

saucy	not-affected
raring	not-affected
quantal	not-affected
precise	not-affected
oneiric	not-affected
natty	not-affected
maverick	ignored
lucid	ignored
hardy	ignored

Common Weakness Enumeration

CWE-326 - Inadequate Encryption Strength
The software stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719

https://security-tracker.debian.org/tracker/CVE-2010-3670

https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719

https://security-tracker.debian.org/tracker/CVE-2010-3670

https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness