Lucene search
HistoryAug 14, 2012 - 11:55 p.m.
CVE-2012-2073
cve-2012-2073
drupal
security vulnerability
remote code execution
permission bypass
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.7%
The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the “use PHP for settings” permission while importing settings, which allows remote authenticated users with certain permissions to execute arbitrary PHP code via unspecified vectors.
Affected configurations
Node
kristof_de_jaegerbundle_copyMatch7.x-1.0
ORkristof_de_jaegerbundle_copyMatch7.x-1.x
drupaldrupalMatch-
References
Social References
More
Related
prion
prion
Code injection
2012-08-14 23:55:00
nvd
nvd
CVE-2012-2073
2012-08-14 23:55:01
drupal
drupal
SA-CONTRIB-2012-046 - Bundle Copy - Arbitrary Code execution
2012-03-28 00:00:00
cvelist
cvelist
CVE-2012-2073
2012-08-14 23:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.7%
Related for CVE-2012-2073