PT-2012-4211 · Drupal · Organic Groups

Kurt Seifried · Publicado 2012-06-27 · Atualizado 2017-08-29 · CVE-2012-2721

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Organic Groups (OG) module versions 6.x-2.x before 6.x-2.4

Description The issue arises from improper permission checks in the default views of the Organic Groups (OG) module when all users have the "access content" permission removed. This allows remote attackers to bypass access restrictions, potentially leading to unspecified impacts.

Recommendations For Organic Groups (OG) module versions 6.x-2.x before 6.x-2.4, update to version 6.x-2.4 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-2721

Produtos afetados

Organic Groups

Referências · 9

• 🔥 http://drupalcode.org/project/og.git/commitdiff/1485708 · Exploit
• http://securityfocus.com/bid/53838 · Nota
• http://openwall.com/lists/oss-security/2012/06/14/3 · Nota
• http://osvdb.org/82728 · Nota
• http://drupal.org/node/1619736 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76150 · Nota
• http://secunia.com/advisories/49397 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-2721 · Nota de Segurança
• http://drupal.org/node/1619810 · Aviso do Fabricante