CVE-2012-5655

Опубликовано: 03 янв. 2013

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The Context module 6.x-3.x before 6.x-3.1 and 7.x-3.x before 7.x-3.0-beta6 for Drupal does not properly restrict access to block content, which allows remote attackers to obtain sensitive information via a crafted request.

Ссылки

http://drupal.org/node/1870550
Patch
Vendor Advisory
http://drupalcode.org/project/context.git/commitdiff/4452bf1
Exploit
Patch
http://drupalcode.org/project/context.git/commitdiff/d8bf8b6
Patch
http://secunia.com/advisories/51517
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/12/20/1
http://www.securityfocus.com/bid/56993
http://drupal.org/node/1870550
Patch
Vendor Advisory
http://drupalcode.org/project/context.git/commitdiff/4452bf1
Exploit
Patch
http://drupalcode.org/project/context.git/commitdiff/d8bf8b6
Patch
http://secunia.com/advisories/51517
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/12/20/1
http://www.securityfocus.com/bid/56993

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:steven_jones:context:6.x-3.0:*:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:beta1:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:beta2:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:beta3:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:beta4:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:beta5:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:beta6:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:beta7:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:beta8:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:rc1:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.0:rc2:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:6.x-3.x:dev:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.0:alpha3:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.0:beta1:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.0:beta2:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.0:beta3:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.0:beta4:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.0:beta5:*:*:*:*:*:*

cpe:2.3:a:steven_jones:context:7.x-3.x:dev:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.0056

Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-jr76-mrgv-27jp

github

около 3 лет назад