CVE-2012-1056

Опубликовано: 14 фев. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.

Ссылки

http://drupal.org/node/1423722
Patch
http://drupal.org/node/1425150
Patch
Vendor Advisory
http://osvdb.org/78817
http://secunia.com/advisories/47851
Vendor Advisory
http://www.securityfocus.com/bid/51826
https://exchange.xforce.ibmcloud.com/vulnerabilities/72920
http://drupal.org/node/1423722
Patch
http://drupal.org/node/1425150
Patch
Vendor Advisory
http://osvdb.org/78817
http://secunia.com/advisories/47851
Vendor Advisory
http://www.securityfocus.com/bid/51826
https://exchange.xforce.ibmcloud.com/vulnerabilities/72920

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:sean_robertson:forward:6.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.2:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.3:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.4:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.5:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.6:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.7:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.8:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.9:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.10:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.11:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.12:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.13:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.14:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.15:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.16:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.17:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.18:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.19:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.20:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:6.x-1.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:sean_robertson:forward:7.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.0:alpha3:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.0:rc3:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.0:rc4:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.2:*:*:*:*:*:*:*

cpe:2.3:a:sean_robertson:forward:7.x-1.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.0045

Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-wfp3-hjq5-f86q

github

около 3 лет назад