CVE-2012-4498

2022-10-0316:15:32

redhat

www.cve.org

cve-2012-4498

drupal

activism module

access restriction

bypass

remote attackers

unspecified impact

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the “Campaign” content type, which might allow remote attackers to bypass access restrictions and possibly have other unspecified impact.

References

drupal.org/node/1762152

drupal.org/node/1762160

www.openwall.com/lists/oss-security/2012/10/04/6

www.openwall.com/lists/oss-security/2012/10/07/1