PT-2012-4209 · Microsoft+1 · Internet Explorer+1

Kurt Seifried · Published 2012-06-27 · Updated 2012-06-27 · CVE-2012-2719

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions filedepot module versions 6.x-1.x before 6.x-1.3 for Drupal

Description The issue affects the filedepot module for Drupal. When accessed using multiple different browsers from the same IP address, it causes Internet Explorer sessions to switch users when uploading a file. This has an unspecified impact, possibly involving file uploads to the wrong user directory.

Recommendations For filedepot module versions 6.x-1.x before 6.x-1.3, update to version 6.x-1.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-2719

Affected Products

Internet Explorer

Filedepot

References · 6

• http://drupal.org/node/1598782 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-2719 · Security Note
• http://secunia.com/advisories/49316 · Vendor Advisory
• http://drupal.org/node/1608864 · Vendor Advisory
• http://osvdb.org/82575 · Note
• http://openwall.com/lists/oss-security/2012/06/14/3 · Note