Lucene search

K
nvd[email protected]NVD:CVE-2012-2727
HistoryJun 27, 2012 - 12:55 a.m.

CVE-2012-2727

2012-06-2700:55:05
CWE-20
web.nvd.nist.gov
2

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.7

Confidence

High

EPSS

0.005

Percentile

76.4%

Open redirect vulnerability in the Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when synchronizing user data, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.

Affected configurations

Nvd
Node
bryce_hamrickjanrain_captureMatch6.x-1.0
OR
bryce_hamrickjanrain_captureMatch7.x-1.0
AND
drupaldrupalMatch-
VendorProductVersionCPE
bryce_hamrickjanrain_capture6.x-1.0cpe:2.3:a:bryce_hamrick:janrain_capture:6.x-1.0:*:*:*:*:*:*:*
bryce_hamrickjanrain_capture7.x-1.0cpe:2.3:a:bryce_hamrick:janrain_capture:7.x-1.0:*:*:*:*:*:*:*
drupaldrupal-cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.7

Confidence

High

EPSS

0.005

Percentile

76.4%

Related for NVD:CVE-2012-2727