Lucene search

[email protected]CVE-2012-4483

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-4483

2022-10-0316:15:34

CWE-264

[email protected]

web.nvd.nist.gov

drupal

commons module

security vulnerability

access restrictions

cve-2012-4483

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

64.2%

JSON

The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_default.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensitive information via the recent comments listing.

Affected configurations

NVD

Node

acquiacommonsMatch6.x-2.4

acquiacommonsMatch6.x-2.5

acquiacommonsMatch6.x-2.6

acquiacommonsMatch6.x-2.7

acquiacommonsMatch6.x-2.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
acquia:commonsacquia commonseq6.x-2.4
acquia:commonsacquia commonseq6.x-2.5
acquia:commonsacquia commonseq6.x-2.6
acquia:commonsacquia commonseq6.x-2.7
acquia:commonsacquia commonseq6.x-2.x

CPE	Name	Operator	Version
acquia:commons	acquia commons	eq	6.x-2.4
acquia:commons	acquia commons	eq	6.x-2.5
acquia:commons	acquia commons	eq	6.x-2.6
acquia:commons	acquia commons	eq	6.x-2.7
acquia:commons	acquia commons	eq	6.x-2.x

References

drupal.org/node/1679820

drupal.org/node/1679908

drupalcode.org/project/commons.git/commitdiff/8ef688b

www.openwall.com/lists/oss-security/2012/10/04/6

www.openwall.com/lists/oss-security/2012/10/07/1

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

64.2%

JSON

Related for CVE-2012-4483

prion1 nvd1 cvelist1