Lucene search

[email protected]CVE-2012-5542

HistoryDec 03, 2012 - 9:55 p.m.

CVE-2012-5542

2012-12-0321:55:02

CWE-352

[email protected]

web.nvd.nist.gov

cve-2012-5542

csrf

vulnerability

commerce extra panes

drupal

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

Cross-site request forgery (CSRF) vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to “the link to reorder items.”

Affected configurations

NVD

Node

pedro_cambracommerce_extra_panesMatch7.x-1.0

pedro_cambracommerce_extra_panesMatch7.x-1.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
pedro_cambra:commerce_extra_panespedro cambra commerce extra paneseq7.x-1.0
pedro_cambra:commerce_extra_panespedro cambra commerce extra paneseq7.x-1.x

CPE	Name	Operator	Version
pedro_cambra:commerce_extra_panes	pedro cambra commerce extra panes	eq	7.x-1.0
pedro_cambra:commerce_extra_panes	pedro cambra commerce extra panes	eq	7.x-1.x

References

drupal.org/node/1802192

drupal.org/node/1802258

osvdb.org/85892

secunia.com/advisories/50802

www.openwall.com/lists/oss-security/2012/11/20/4

www.securityfocus.com/bid/55776

exchange.xforce.ibmcloud.com/vulnerabilities/79025

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

Related for CVE-2012-5542

drupal1 nvd1 prion1 cvelist1