Lucene search
HistoryJun 27, 2012 - 12:55 a.m.
CVE-2012-2730
cve-2012-2730
drupal
protected node module
remote attackers
access restrictions
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
86.2%
The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly “protect node access when nodes are accessed outside of the standard node view,” which allows remote attackers to bypass intended access restrictions.
Affected configurations
Node
alexis_wilkeprotected_nodeMatch6.x-1.0
ORalexis_wilkeprotected_nodeMatch6.x-1.2
ORalexis_wilkeprotected_nodeMatch6.x-1.3
ORalexis_wilkeprotected_nodeMatch6.x-1.4
ORalexis_wilkeprotected_nodeMatch6.x-1.5
ORalexis_wilkeprotected_nodeMatch6.x-1.xdev
drupaldrupalMatch-
Related
cvelist
cvelist
CVE-2012-2730
2012-06-27 00:00:00
drupal
drupal
SA-CONTRIB-2012-101 - Protected Node - Access Bypass
2012-06-13 00:00:00
nvd
nvd
CVE-2012-2730
2012-06-27 00:55:05
prion
prion
Design/Logic Flaw
2012-06-27 00:55:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
86.2%
Related for CVE-2012-2730