Design/Logic Flaw

2012-11-0215:55:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the “Campaign” content type, which might allow remote attackers to bypass access restrictions and possibly have other unspecified impact.

CPENameOperatorVersion
activismeq6.120.20
activismeq6.x-2.x dev

CPE	Name	Operator	Version
	activism	eq	6.120.20
	activism	eq	6.x-2.x dev

References

www.openwall.com/lists/oss-security/2012/10/04/6

www.openwall.com/lists/oss-security/2012/10/07/1

drupal.org/node/1762152

drupal.org/node/1762160