CVE-2012-4488

2022-10-0316:15:35

redhat

www.cve.org

drupal

location module

unauthorized access

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.5%

JSON

The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly check user or node access permissions, which allows remote attackers to read node or user results via the location search page.

References

drupal.org/node/1699962

drupal.org/node/1699984

drupal.org/node/1700588

www.openwall.com/lists/oss-security/2012/10/04/6

www.openwall.com/lists/oss-security/2012/10/07/1