Lucene search

[email protected]CVE-2012-5552

HistoryDec 03, 2012 - 9:55 p.m.

CVE-2012-5552

2012-12-0321:55:02

CWE-200

[email protected]

web.nvd.nist.gov

cve-2012-5552

password policy

drupal

remote attackers

password hashes

network sniffing

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

JSON

The Password policy module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to obtain password hashes by sniffing the network, related to “client-side password history checks.”

Affected configurations

NVD

Node

erikwebbpassword_policyMatch6.x-1.0

erikwebbpassword_policyMatch6.x-1.0alpha1

erikwebbpassword_policyMatch6.x-1.0alpha2

erikwebbpassword_policyMatch6.x-1.0alpha3

erikwebbpassword_policyMatch6.x-1.0alpha4

erikwebbpassword_policyMatch6.x-1.0beta1

erikwebbpassword_policyMatch6.x-1.1

erikwebbpassword_policyMatch6.x-1.2

erikwebbpassword_policyMatch6.x-1.3

erikwebbpassword_policyMatch6.x-1.4

erikwebbpassword_policyMatch6.x-1.xdev

erikwebbpassword_policyMatch7.x-1.0

erikwebbpassword_policyMatch7.x-1.0beta1

erikwebbpassword_policyMatch7.x-1.0beta2

erikwebbpassword_policyMatch7.x-1.0beta3

erikwebbpassword_policyMatch7.x-1.0beta4

erikwebbpassword_policyMatch7.x-1.0rc1

erikwebbpassword_policyMatch7.x-1.0rc2

erikwebbpassword_policyMatch7.x-1.0rc3

erikwebbpassword_policyMatch7.x-1.1

erikwebbpassword_policyMatch7.x-1.2

erikwebbpassword_policyMatch7.x-1.3

erikwebbpassword_policyMatch7.x-1.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
erikwebb:password_policyerikwebb password policyeq6.x-1.0
erikwebb:password_policyerikwebb password policyeq6.x-1.1
erikwebb:password_policyerikwebb password policyeq6.x-1.2
erikwebb:password_policyerikwebb password policyeq6.x-1.3
erikwebb:password_policyerikwebb password policyeq6.x-1.4
erikwebb:password_policyerikwebb password policyeq6.x-1.x
erikwebb:password_policyerikwebb password policyeq7.x-1.0
erikwebb:password_policyerikwebb password policyeq7.x-1.1
erikwebb:password_policyerikwebb password policyeq7.x-1.2
erikwebb:password_policyerikwebb password policyeq7.x-1.3

CPE	Name	Operator	Version
erikwebb:password_policy	erikwebb password policy	eq	6.x-1.0
erikwebb:password_policy	erikwebb password policy	eq	6.x-1.1
erikwebb:password_policy	erikwebb password policy	eq	6.x-1.2
erikwebb:password_policy	erikwebb password policy	eq	6.x-1.3
erikwebb:password_policy	erikwebb password policy	eq	6.x-1.4
erikwebb:password_policy	erikwebb password policy	eq	6.x-1.x
erikwebb:password_policy	erikwebb password policy	eq	7.x-1.0
erikwebb:password_policy	erikwebb password policy	eq	7.x-1.1
erikwebb:password_policy	erikwebb password policy	eq	7.x-1.2
erikwebb:password_policy	erikwebb password policy	eq	7.x-1.3

Rows per page:

1-10 of 111

References

drupal.org/node/1828130

drupal.org/node/1828142

drupal.org/node/1828340

www.openwall.com/lists/oss-security/2012/11/20/4

www.securityfocus.com/bid/56350

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

JSON

Related for CVE-2012-5552

drupal1 nvd1 prion1 cvelist1