Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-5584
cve-2012-5584
drupal
table of contents
remote attack
node permissions
security vulnerability
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.0%
The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node’s headers by accessing a table of contents block.
Affected configurations
Node
m2oswtableofcontentsMatch6.x-3.0
ORm2oswtableofcontentsMatch6.x-3.1
ORm2oswtableofcontentsMatch6.x-3.2
ORm2oswtableofcontentsMatch6.x-3.3
ORm2oswtableofcontentsMatch6.x-3.4
ORm2oswtableofcontentsMatch6.x-3.5
ORm2oswtableofcontentsMatch6.x-3.6
ORm2oswtableofcontentsMatch6.x-3.7
ORm2oswtableofcontentsMatch6.x-3.xdev
drupaldrupalMatch-
Related
drupal
drupal
SA-CONTRIB-2012-166 - Table of Contents - Access Bypass
2012-11-14 00:00:00
nvd
nvd
CVE-2012-5584
2012-12-26 17:55:01
cvelist
cvelist
CVE-2012-5584
2022-10-03 16:15:29
prion
prion
Code injection
2012-12-26 17:55:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.0%
Related for CVE-2012-5584