Lucene search
HistoryJun 27, 2012 - 12:55 a.m.
CVE-2012-2702
cve-2012-2702
ubercart
product keys
drupal
access control
remote attackers
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.7%
The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote attackers to read all unassigned product keys via certain conditions related to the uid.
Affected configurations
Node
tony_freixasubercart_product_keysMatch6.x-1.0
ORtony_freixasubercart_product_keysMatch6.x-1.0alpha1
ORtony_freixasubercart_product_keysMatch6.x-1.0alpha2
ORtony_freixasubercart_product_keysMatch6.x-1.0alpha3
ORtony_freixasubercart_product_keysMatch6.x-1.0beta1
ORtony_freixasubercart_product_keysMatch6.x-1.0rc1
ORtony_freixasubercart_product_keysMatch6.x-1.0rc2
drupaldrupalMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| tony_freixas:ubercart_product_keys | tony freixas ubercart product keys | eq | 6.x-1.0 |
Related
drupal
drupal
SA-CONTRIB-2012-076 - Ubercart Product Keys Access Bypass
2012-05-16 00:00:00
nvd
nvd
CVE-2012-2702
2012-06-27 00:55:02
prion
prion
Buffer overflow
2012-06-27 00:55:00
cvelist
cvelist
CVE-2012-2702
2012-06-27 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.7%
Related for CVE-2012-2702