PT-2012-3045 · Drupal · Drupal Forward

Published 2012-02-14 · Updated 2017-08-29 · CVE-2012-1056

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Forward module versions 6.x-1.x before 6.x-1.21 Drupal Forward module versions 7.x-1.x before 7.x-1.3

Description The issue concerns the improper enforcement of permissions for certain features, including Recent forwards, Most forwarded, and Dynamic blocks. This allows remote attackers to obtain node titles via unspecified vectors.

Recommendations For Drupal Forward module version 6.x-1.x, update to version 6.x-1.21 or later. For Drupal Forward module version 7.x-1.x, update to version 7.x-1.3 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1056

Affected Products

Drupal Forward

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-1056 · Security Note
• http://drupal.org/node/1425150 · Vendor Advisory
• http://drupal.org/node/1423722 · Patch
• http://secunia.com/advisories/47851 · Vendor Advisory
• http://osvdb.org/78817 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72920 · Note
• http://securityfocus.com/bid/51826 · Note