Lucene search
HistoryJun 27, 2012 - 12:55 a.m.
CVE-2012-2720
cve-2012-2720
token authentication
drupal
security vulnerability
privilege escalation
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.8%
The Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges.
Affected configurations
Node
adam_rosstokenauthMatch6.x-1.0
ORadam_rosstokenauthMatch6.x-1.1
ORadam_rosstokenauthMatch6.x-1.3
ORadam_rosstokenauthMatch6.x-1.4
ORadam_rosstokenauthMatch6.x-1.5
ORadam_rosstokenauthMatch6.x-1.6
ORadam_rosstokenauthMatch6.x-1.xdev
drupaldrupalMatch-
Related
prion
prion
Authentication flaw
2012-06-27 00:55:00
drupal
drupal
SA-CONTRIB-2012-091 - Token Authentication - Access bypass
2012-06-06 00:00:00
nvd
nvd
CVE-2012-2720
2012-06-27 00:55:04
cvelist
cvelist
CVE-2012-2720
2012-06-27 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.8%
Related for CVE-2012-2720