Lucene search

K
cve[email protected]CVE-2012-2719
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-2719

2022-10-0316:15:35
CWE-264
web.nvd.nist.gov
26
cve-2012-2719
filedepot module
drupal
internet explorer
session management vulnerability
file uploads

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%

The filedepot module 6.x-1.x before 6.x-1.3 for Drupal, when accessed using multiple different browsers from the same IP address, causes Internet Explorer sessions to “switch users” when uploading a file, which has unspecified impact possibly involving file uploads to the wrong user directory, aka “Session Management Vulnerability.”

Affected configurations

NVD
Node
blaine_langfiledepotMatch6.x-1.0
OR
blaine_langfiledepotMatch6.x-1.0rc1
OR
blaine_langfiledepotMatch6.x-1.0rc2
OR
blaine_langfiledepotMatch6.x-1.0rc3
OR
blaine_langfiledepotMatch6.x-1.0rc4
OR
blaine_langfiledepotMatch6.x-1.1
OR
blaine_langfiledepotMatch6.x-1.2
OR
blaine_langfiledepotMatch6.x-1.xdev
AND
drupaldrupalMatch-

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%

Related for CVE-2012-2719