CVE-2012-5588
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.5%
The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which allows remote attackers to email the stored address via unspecified vectors.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| epiqo:email | epiqo email | eq | 6.x-1.0 |
| epiqo:email | epiqo email | eq | 6.x-1.1 |
| epiqo:email | epiqo email | eq | 6.x-1.2 |
| epiqo:email | epiqo email | eq | 6.x-1.x |
Related
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.5%