Lucene search
HistoryFeb 14, 2012 - 12:55 a.m.
CVE-2012-1056
drupal
forward module
permission enforcement
remote attack
cve-2012-1056
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.6%
The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.
Affected configurations
Node
sean_robertsonforwardMatch6.x-1.0
ORsean_robertsonforwardMatch6.x-1.1
ORsean_robertsonforwardMatch6.x-1.2
ORsean_robertsonforwardMatch6.x-1.3
ORsean_robertsonforwardMatch6.x-1.4
ORsean_robertsonforwardMatch6.x-1.5
ORsean_robertsonforwardMatch6.x-1.6
ORsean_robertsonforwardMatch6.x-1.7
ORsean_robertsonforwardMatch6.x-1.8
ORsean_robertsonforwardMatch6.x-1.9
ORsean_robertsonforwardMatch6.x-1.10
ORsean_robertsonforwardMatch6.x-1.11
ORsean_robertsonforwardMatch6.x-1.12
ORsean_robertsonforwardMatch6.x-1.13
ORsean_robertsonforwardMatch6.x-1.14
ORsean_robertsonforwardMatch6.x-1.15
ORsean_robertsonforwardMatch6.x-1.16
ORsean_robertsonforwardMatch6.x-1.17
ORsean_robertsonforwardMatch6.x-1.18
ORsean_robertsonforwardMatch6.x-1.19
ORsean_robertsonforwardMatch6.x-1.20
ORsean_robertsonforwardMatch6.x-1.x-dev
drupaldrupal
Node
sean_robertsonforwardMatch7.x-1.0
ORsean_robertsonforwardMatch7.x-1.0alpha1
ORsean_robertsonforwardMatch7.x-1.0alpha2
ORsean_robertsonforwardMatch7.x-1.0alpha3
ORsean_robertsonforwardMatch7.x-1.0rc1
ORsean_robertsonforwardMatch7.x-1.0rc2
ORsean_robertsonforwardMatch7.x-1.0rc3
ORsean_robertsonforwardMatch7.x-1.0rc4
ORsean_robertsonforwardMatch7.x-1.1
ORsean_robertsonforwardMatch7.x-1.2
ORsean_robertsonforwardMatch7.x-1.x-dev
drupaldrupal
Related
nvd
nvd
CVE-2012-1056
2012-02-14 00:55:00
cvelist
cvelist
CVE-2012-1056
2012-02-14 00:00:00
prion
prion
Code injection
2012-02-14 00:55:00
drupal
drupal
SA-CONTRIB-2012-016 - Forward module CSRF and Access bypass
2012-02-01 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.6%
Related for CVE-2012-1056