Lucene search
HistoryNov 30, 2012 - 10:55 p.m.
CVE-2012-4471
cve-2012-4471
drupal
search autocomplete
security vulnerability
nvd
access restriction
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.8%
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.
Affected configurations
Node
dominique_clausesearch_autocompleteMatch7.x-2.0
ORdominique_clausesearch_autocompleteMatch7.x-2.1
ORdominique_clausesearch_autocompleteMatch7.x-2.3
ORdominique_clausesearch_autocompleteMatch7.x-2.xdev
drupaldrupalMatch-
Related
cvelist
cvelist
CVE-2012-4471
2012-11-30 22:00:00
drupal
drupal
SA-CONTRIB-2012-107 - Search autocomplete - Access bypass
2012-07-11 00:00:00
prion
prion
Design/Logic Flaw
2012-11-30 22:55:00
nvd
nvd
CVE-2012-4471
2012-11-30 22:55:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.8%
Related for CVE-2012-4471