PT-2012-5437 · Drupal · The Monthly Archive By Node Type

Joshua Brauer · Published 2012-10-31 · Updated 2013-03-02 · CVE-2012-4491

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions The Monthly Archive by Node Type module version 6.x for Drupal

Description The issue is related to improper permission checking by the module, allowing remote attackers to access restricted nodes.

Recommendations For The Monthly Archive by Node Type module version 6.x, consider disabling the module until a patch is available to prevent unauthorized access to restricted nodes.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-4491

Affected Products

The Monthly Archive By Node Type

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-4491 · Security Note
• http://drupal.org/node/1708198 · Vendor Advisory
• http://openwall.com/lists/oss-security/2012/10/07/1 · Note
• http://securityfocus.com/bid/54768 · Note
• http://openwall.com/lists/oss-security/2012/10/04/6 · Note