Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4498
cve-2012-4498
activism module
drupal
access restrictions
bypass
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.5%
The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the “Campaign” content type, which might allow remote attackers to bypass access restrictions and possibly have other unspecified impact.
Affected configurations
Node
morbus_iffactivismMatch6.x-2.0
ORmorbus_iffactivismMatch6.x-2.xdev
drupaldrupalMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| morbus_iff:activism | morbus iff activism | eq | 6.x-2.0 |
| morbus_iff:activism | morbus iff activism | eq | 6.x-2.x |
Related
prion
prion
Design/Logic Flaw
2012-11-02 15:55:00
nvd
nvd
CVE-2012-4498
2012-11-02 15:55:01
cvelist
cvelist
CVE-2012-4498
2022-10-03 16:15:32
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.5%
Related for CVE-2012-4498