Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2296

Опубликовано: 25 июл. 2012
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:janrain:rpx:6.x-1.0:beta1:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-1.0:dev:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-1.1:rc2:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-1.2:*:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-1.2:rc2:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-1.3:*:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-1.4:*:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-2.1:*:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-2.1:beta1:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-2.1:beta2:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-2.1:beta3:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-2.1:dev:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:6.x-2.1:rc1:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:7.x-2.0:*:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:7.x-2.1:*:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:7.x-2.1:beta1:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:7.x-2.1:beta2:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:7.x-2.1:beta3:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:7.x-2.1:rc1:*:*:*:*:*:*
cpe:2.3:a:janrain:rpx:7.x-2.x:dev:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

EPSS

Процентиль: 66%
0.00516
Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

github
около 3 лет назад

The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability.

EPSS

Процентиль: 66%
0.00516
Низкий

5 Medium

CVSS2

Дефекты

CWE-200