Lucene search
HistoryJun 27, 2012 - 12:55 a.m.
CVE-2012-2721
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.033
Percentile
91.4%
The default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not properly check permissions when all users have the “access content” permission removed, which allows remote attackers to bypass access restrictions and possibly have other unspecified impact.
Affected configurations
Node
moshe_weitzmanorganic_groupsMatch6.x-2.0
ORmoshe_weitzmanorganic_groupsMatch6.x-2.0rc1
ORmoshe_weitzmanorganic_groupsMatch6.x-2.0rc2
ORmoshe_weitzmanorganic_groupsMatch6.x-2.0rc3
ORmoshe_weitzmanorganic_groupsMatch6.x-2.1
ORmoshe_weitzmanorganic_groupsMatch6.x-2.2
ORmoshe_weitzmanorganic_groupsMatch6.x-2.3
ORmoshe_weitzmanorganic_groupsMatch6.x-2.xdev
drupaldrupalMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moshe_weitzman | organic_groups | 6.x-2.0 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:*:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.0 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc1:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.0 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc2:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.0 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc3:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.1 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.1:*:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.2 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.2:*:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.3 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.3:*:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.x | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.x:dev:*:*:*:*:*:* |
| drupal | drupal | - | cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2012-2721
2012-06-27 00:55:04
prion
prion
Design/Logic Flaw
2012-06-27 00:55:00
cvelist
cvelist
CVE-2012-2721
2012-06-27 00:00:00
drupal
drupal
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.033
Percentile
91.4%
Related for NVD:CVE-2012-2721