CVE-2012-5586

The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vectors related to the "user index method" and "the path to the user resource."...

PT-2012-6036

Name of the Vulnerable Software and Affected Versions Services module versions 6.x-3.x before 6.x-3.3 Services module versions 7.x-3.x before 7.x-3.3 Description The issue allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vectors...

CVE-2012-5586: Undefined Security Weakness

The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vectors related to the "user index method" and "the path to the user resource."...