PT-2012-3045 · Drupal · Drupal Forward

Publicado 2012-02-14 · Atualizado 2017-08-29 · CVE-2012-1056

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Forward module versions 6.x-1.x before 6.x-1.21 Drupal Forward module versions 7.x-1.x before 7.x-1.3

Description The issue concerns the improper enforcement of permissions for certain features, including Recent forwards, Most forwarded, and Dynamic blocks. This allows remote attackers to obtain node titles via unspecified vectors.

Recommendations For Drupal Forward module version 6.x-1.x, update to version 6.x-1.21 or later. For Drupal Forward module version 7.x-1.x, update to version 7.x-1.3 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1056

Produtos afetados

Drupal Forward

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-1056 · Nota de Segurança
• http://drupal.org/node/1425150 · Aviso do Fabricante
• http://osvdb.org/78817 · Nota
• http://drupal.org/node/1423722 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72920 · Nota
• http://securityfocus.com/bid/51826 · Nota
• http://secunia.com/advisories/47851 · Aviso do Fabricante