CVE-2014-3944 on Ubuntu 12.04 LTS (precise) - medium.
Description:
The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors.