TYPO3 Security Bulletin TYPO3-SA-2010-001: Authentication Bypass in TYPO3 Core

A vulnerability has been discovered in the typo3 core. An external attacker can bypass the admin authentication if the OpenID extension is enabled.

This was posted 2 years ago. Notes.