[SECURITY] Information disclosure showing DB name
authorGeorg Ringer <mail@ringerge.org>
Wed, 28 Mar 2012 11:54:06 +0000 (13:54 +0200)
committerOliver Hader <oliver@typo3.org>
Wed, 28 Mar 2012 11:54:09 +0000 (13:54 +0200)
commit784ffda581fe0f0f598a86036ec96b3f2ccb142d
treed0f18493f881b7c15a4e05260b2d5862207d6e02
parenta4d4c223dc154667ec9c13909e162ef30aec6039
[SECURITY] Information disclosure showing DB name

By accessing a cli script in the frontend, it is possible
that the DB name is shown.

Change-Id: I123530c4814dd1ac4a3af6d5eaea3df62dc11297
Fixes: #29060
Security-Commit: 1d43d5ccf1f2d1e6ffbe8600795ea8235e8cd6d3
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10003
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
t3lib/class.t3lib_beuserauth.php