Lucene search

RedhatCVE-2012-5570

HistoryFeb 08, 2020 - 7:15 p.m.

CVE-2012-5570

2020-02-0819:15:10

CWE-200

redhat

web.nvd.nist.gov

129

cve-2012-5570

drupal

webmail

email addresses

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0.002

Percentile

54.5%

JSON

The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the “access basic_webmail” permission to read arbitrary users’ email addresses.

Affected configurations

Nvd

Vulners

Node

basic_webmail_projectbasic_webmailMatch6.x-1.0drupal

basic_webmail_projectbasic_webmailMatch6.x-1.1drupal

basic_webmail_projectbasic_webmailMatch6.x-1.xdevdrupal

VendorProductVersionCPE
basic_webmail_projectbasic_webmail6.x-1.0cpe:2.3:a:basic_webmail_project:basic_webmail:6.x-1.0:*:*:*:*:drupal:*:*
basic_webmail_projectbasic_webmail6.x-1.1cpe:2.3:a:basic_webmail_project:basic_webmail:6.x-1.1:*:*:*:*:drupal:*:*
basic_webmail_projectbasic_webmail6.x-1.xcpe:2.3:a:basic_webmail_project:basic_webmail:6.x-1.x:dev:*:*:*:drupal:*:*

Vendor	Product	Version	CPE
basic_webmail_project	basic_webmail	6.x-1.0	cpe:2.3:a:basic_webmail_project:basic_webmail:6.x-1.0:::::drupal::
basic_webmail_project	basic_webmail	6.x-1.1	cpe:2.3:a:basic_webmail_project:basic_webmail:6.x-1.1:::::drupal::
basic_webmail_project	basic_webmail	6.x-1.x	cpe:2.3:a:basic_webmail_project:basic_webmail:6.x-1.x:dev::::drupal::*

CNA Affected

[
  {
    "product": "Basic webmail module",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.x-1.x before 6.x-1.2"
      }
    ]
  }
]

References

www.openwall.com/lists/oss-security/2012/11/20/4

www.openwall.com/lists/oss-security/2012/11/27/2

drupal.org/node/1808616

www.drupal.org/node/1808852

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0.002

Percentile

54.5%

JSON

Related for CVE-2012-5570