Lucene search

K
cve[email protected]CVE-2012-1623
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-1623

2022-10-0316:15:25
CWE-264
web.nvd.nist.gov
21
cve-2012-1623
registration codes
drupal
access restriction
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.0%

The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions.

Affected configurations

NVD
Node
aidanlisterregcodeRange6.x-2.3
OR
aidanlisterregcodeMatch6.x-1.0
OR
aidanlisterregcodeMatch6.x-1.1
OR
aidanlisterregcodeMatch6.x-1.2
OR
aidanlisterregcodeMatch6.x-1.3
OR
aidanlisterregcodeMatch6.x-1.4
OR
aidanlisterregcodeMatch6.x-1.5
OR
aidanlisterregcodeMatch6.x-1.xdev
OR
aidanlisterregcodeMatch6.x-2.0
OR
aidanlisterregcodeMatch6.x-2.0beta1
OR
aidanlisterregcodeMatch6.x-2.0beta2
OR
aidanlisterregcodeMatch6.x-2.0beta3
OR
aidanlisterregcodeMatch6.x-2.0beta4
OR
aidanlisterregcodeMatch6.x-2.0dev
OR
aidanlisterregcodeMatch6.x-2.1
OR
aidanlisterregcodeMatch6.x-2.2
AND
drupaldrupalMatch-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.0%

Related for CVE-2012-1623