Lucene search

K
cve[email protected]CVE-2012-2730
HistoryJun 27, 2012 - 12:55 a.m.

CVE-2012-2730

2012-06-2700:55:05
CWE-264
web.nvd.nist.gov
19
cve-2012-2730
drupal
protected node module
remote attackers
access restrictions

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.1%

The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly “protect node access when nodes are accessed outside of the standard node view,” which allows remote attackers to bypass intended access restrictions.

Affected configurations

NVD
Node
alexis_wilkeprotected_nodeMatch6.x-1.0
OR
alexis_wilkeprotected_nodeMatch6.x-1.2
OR
alexis_wilkeprotected_nodeMatch6.x-1.3
OR
alexis_wilkeprotected_nodeMatch6.x-1.4
OR
alexis_wilkeprotected_nodeMatch6.x-1.5
OR
alexis_wilkeprotected_nodeMatch6.x-1.xdev
AND
drupaldrupalMatch-

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.1%

Related for CVE-2012-2730