CVE-2014-3944
The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors.
Date published : 2014-06-03
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/