Lucene search
HistoryJun 27, 2012 - 12:55 a.m.
CVE-2012-2707
cve-2012-2707
hostmaster module
aegir module
drupal
access restrictions
bypass
remote attackers
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.03 Low
EPSS
Percentile
91.0%
The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access restrictions and edit unauthorized nodes.
Affected configurations
Node
antoine_beauprehostmasterMatch6.x-1.2
ORantoine_beauprehostmasterMatch6.x-1.3
ORantoine_beauprehostmasterMatch6.x-1.4
ORantoine_beauprehostmasterMatch6.x-1.5
ORantoine_beauprehostmasterMatch6.x-1.6
ORantoine_beauprehostmasterMatch6.x-1.7
ORantoine_beauprehostmasterMatch6.x-1.8
ORantoine_beauprehostmasterMatch6.x-1.xdev
drupaldrupalMatch-
Related
cvelist
cvelist
CVE-2012-2707
2012-06-27 00:00:00
prion
prion
Design/Logic Flaw
2012-06-27 00:55:00
nvd
nvd
CVE-2012-2707
2012-06-27 00:55:04
drupal
drupal
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.03 Low
EPSS
Percentile
91.0%
Related for CVE-2012-2707