CVE-2012-2702

The CVE-2012-2702 issue affects the Ubercart Product Keys module for Drupal (6.x-1.x) prior to 6.x-1.1. The vulnerability arises from improper access checks for product keys, allowing remote attackers to read all unassigned product keys under certain uid-related conditions. Impact is exposure of ...

SA-CONTRIB-2012-076 - Ubercart Product Keys Access Bypass

CVE: CVE-2012-2702. This module enables you to sell product keys from an Ubercart store. Under certain circumstances, a user can view all unassigned product keys which could grant them access to the software circumventing the process of selling the key. Versions affected Ubercart Product Keys...