Lucene search

[email protected]CVE-2013-4272

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-4272

2022-10-0316:14:58

CWE-200

[email protected]

web.nvd.nist.gov

cve-2013-4272

botcha

spam prevention

drupal

sensitive information

log file

information security

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

JSON

The BOTCHA Spam Prevention module 7.x-1.x before 7.x-1.6, 7.x-2.x before 7.x-2.1, and 7.x-3.x before 7.x-3.3 for Drupal, when the debugging level is set to 5 or 6, logs the content of submitted forms, which allows context-dependent users to obtain sensitive information such as usernames and passwords by reading the log file.

Affected configurations

NVD

Node

botcha_spam_prevention_projectbotchaMatch7.x-1.0

botcha_spam_prevention_projectbotchaMatch7.x-1.1

botcha_spam_prevention_projectbotchaMatch7.x-1.2

botcha_spam_prevention_projectbotchaMatch7.x-1.3

botcha_spam_prevention_projectbotchaMatch7.x-1.4

botcha_spam_prevention_projectbotchaMatch7.x-1.5

botcha_spam_prevention_projectbotchaMatch7.x-1.xdev

botcha_spam_prevention_projectbotchaMatch7.x-2.0

botcha_spam_prevention_projectbotchaMatch7.x-2.xdev

botcha_spam_prevention_projectbotchaMatch7.x-3.0

botcha_spam_prevention_projectbotchaMatch7.x-3.1

botcha_spam_prevention_projectbotchaMatch7.x-3.2

botcha_spam_prevention_projectbotchaMatch7.x-3.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-1.0
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-1.1
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-1.2
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-1.3
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-1.4
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-1.5
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-1.x
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-2.0
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-2.x
botcha_spam_prevention_project:botchabotcha spam prevention project botchaeq7.x-3.0

CPE	Name	Operator	Version
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-1.0
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-1.1
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-1.2
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-1.3
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-1.4
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-1.5
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-1.x
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-2.0
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-2.x
botcha_spam_prevention_project:botcha	botcha spam prevention project botcha	eq	7.x-3.0

Rows per page:

1-10 of 131

References

www.openwall.com/lists/oss-security/2013/08/22/2

drupal.org/node/2064781

drupal.org/node/2064783

drupal.org/node/2064785

drupal.org/node/2065057

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

JSON

Related for CVE-2013-4272

cvelist1 drupal1 prion1 nvd1