CVE-2010-0286: Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote atta...

Security readout for executives and security teams

This CVE describes an authentication bypass in TYPO3 4.3.0's OpenID Identity Authentication extension. Under a specific OpenID-provider behavior, a remote attacker could gain access to a backend user account. The public bundle does not include CVSS, CWE, detailed vectors, exploit evidence, or named patch instructions. Likely limited to TYPO3 4.3.0 deployments using the OpenID Identity Authentication extension, especially where backend authentication relies on affected OpenID provider behavior. The bundle does not prove exposure for later TYPO3 versions or other products. Treat as high priority for legacy TYPO3 environments because it concerns remote backend authentication bypass. Modern environments are only in scope if they still run TYPO3 4.3.0 with the affected extension or inherited equivalent behavior. Mitigation focus: Identify TYPO3 4.3.0 systems using the OpenID Identity Authentication extension.; Review TYPO3-SA-2010-001 for vendor remediation details.; Check TYPO3, IBM X-Force, and advisory references for any patch or upgrade guidance..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.