Vulnerabilities > CVE-2020-25026 - Incorrect Authorization vulnerability in Derhansen Event Management and Registration

CVSS 4.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

derhansen

CWE-863

NVD

Published: 2020-09-02

Updated: 2021-07-21

Summary

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

Vulnerable Configurations

Part	Description	Count
Application	Derhansen Derhansen Event Management AND Registration 0.5.0 Derhansen Event Management AND Registration 0.5.1 Derhansen Event Management AND Registration 0.5.2 Derhansen Event Management AND Registration 0.5.3 Derhansen Event Management AND Registration 1.0.0 Derhansen Event Management AND Registration 1.0.1 Derhansen Event Management AND Registration 1.1.0 Derhansen Event Management AND Registration 1.1.1 Derhansen Event Management AND Registration 1.2.0 Derhansen Event Management AND Registration 1.3.0 Derhansen Event Management AND Registration 1.3.1 Derhansen Event Management AND Registration 1.4.0 Derhansen Event Management AND Registration 1.4.1 Derhansen Event Management AND Registration 1.5.0 Derhansen Event Management AND Registration 1.5.1 Derhansen Event Management AND Registration 1.6.0 Derhansen Event Management AND Registration 1.6.1 Derhansen Event Management AND Registration 1.7.0 Derhansen Event Management AND Registration 1.7.1 Derhansen Event Management AND Registration 1.8.0 Derhansen Event Management AND Registration 1.8.1 Derhansen Event Management AND Registration 2.0.0 Derhansen Event Management AND Registration 2.1.0 Derhansen Event Management AND Registration 3.0.0 Derhansen Event Management AND Registration 3.0.1 Derhansen Event Management AND Registration 3.0.2 Derhansen Event Management AND Registration 3.0.3 Derhansen Event Management AND Registration 3.0.4 Derhansen Event Management AND Registration 3.0.5 Derhansen Event Management AND Registration 3.0.6 Derhansen Event Management AND Registration 3.0.7 Derhansen Event Management AND Registration 3.0.8 Derhansen Event Management AND Registration 4.0.0 Derhansen Event Management AND Registration 4.0.1 Derhansen Event Management AND Registration 4.1.0 Derhansen Event Management AND Registration 4.1.1 Derhansen Event Management AND Registration 4.1.2 Derhansen Event Management AND Registration 4.1.3 Derhansen Event Management AND Registration 4.2.0 Derhansen Event Management AND Registration 4.2.1 Derhansen Event Management AND Registration 4.2.2 Derhansen Event Management AND Registration 4.3.0 Derhansen Event Management AND Registration 5.0.0 Derhansen Event Management AND Registration 5.0.1 Derhansen Event Management AND Registration 5.1.0	45

Common Weakness Enumeration (CWE)

CWE-863 - Incorrect Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References