CVE-2009-3635: TYPO3 CMS Install Tool Vulnerability Allows Access via MD5 Hash
Summary
CVE-2009-3635: TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential. Affects typo3/cms across 4 version ranges.
< 4.0.13
>= 4.1.0, < 4.1.13
>= 4.2.0, < 4.2.10
>= 4.3beta1, < 4.3beta2
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) widely used for building and managing websites. It offers a robust framework for developers and users, featuring a flexible architecture, extensive extensions, and a user-friendly interface. However, certain versions of TYPO3 have a vulnerability in the Install Tool subcomponent that allows unauthorized access using only the MD5 hash of a password, posing a significant security risk.
Vulnerability Detail
The vulnerability in TYPO3 versions 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain unauthorized access to the Install Tool by using the MD5 hash of a password as a credential. This flaw stems from improper authentication mechanisms, which can lead to unauthorized access to sensitive administrative functions, potentially compromising the entire system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 4.0.134.0.13composer require typo3/cms:4.0.13 -
>= 4.1.0, < 4.1.134.1.13composer require typo3/cms:4.1.13 -
>= 4.2.0, < 4.2.104.2.10composer require typo3/cms:4.2.10 -
>= 4.3beta1, < 4.3beta24.3beta2composer require typo3/cms:4.3beta2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, ensure that the Install Tool is not publicly accessible. You can restrict access by configuring your web server to allow access only from trusted IP addresses.
Conclusion
The TYPO3 vulnerability CVE-2009-3635 poses a significant security risk by allowing unauthorized access through the use of an MD5 hash of a password. It is crucial to update to the latest patched versions to mitigate this risk and ensure the security of your TYPO3 installation.
See every vulnerability recorded for typo3/cms →
FAQ
CVE-2009-3635 is a vulnerability identifier that refers to a specific security flaw in TYPO3's Install Tool, allowing unauthorized access using an MD5 hash of a password.
The affected versions include TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring signup.
The risks include unauthorized access to the TYPO3 Install Tool, which can lead to the compromise of sensitive data and administrative controls.
If an immediate update is not possible, restrict access to the Install Tool by configuring your web server to limit access to trusted IP addresses.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
