Lucene search
RedhatCVE-2012-2721HistoryJun 27, 2012 - 12:55 a.m.
CVE-2012-2721
2012-06-2700:55:04
CWE-264
redhat
web.nvd.nist.gov
27
cve-2012-2721
organic groups
og module
drupal
access restrictions
remote attackers
security vulnerability
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.033
Percentile
91.4%
The default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not properly check permissions when all users have the “access content” permission removed, which allows remote attackers to bypass access restrictions and possibly have other unspecified impact.
Affected configurations
Node
moshe_weitzmanorganic_groupsMatch6.x-2.0
ORmoshe_weitzmanorganic_groupsMatch6.x-2.0rc1
ORmoshe_weitzmanorganic_groupsMatch6.x-2.0rc2
ORmoshe_weitzmanorganic_groupsMatch6.x-2.0rc3
ORmoshe_weitzmanorganic_groupsMatch6.x-2.1
ORmoshe_weitzmanorganic_groupsMatch6.x-2.2
ORmoshe_weitzmanorganic_groupsMatch6.x-2.3
ORmoshe_weitzmanorganic_groupsMatch6.x-2.xdev
drupaldrupalMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moshe_weitzman | organic_groups | 6.x-2.0 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:*:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.0 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc1:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.0 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc2:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.0 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc3:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.1 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.1:*:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.2 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.2:*:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.3 | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.3:*:*:*:*:*:*:* |
| moshe_weitzman | organic_groups | 6.x-2.x | cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.x:dev:*:*:*:*:*:* |
| drupal | drupal | - | cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2012-06-27 00:55:00
nvd
nvd
CVE-2012-2721
2012-06-27 00:55:04
cvelist
cvelist
CVE-2012-2721
2012-06-27 00:00:00
drupal
drupal
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.033
Percentile
91.4%
Related for CVE-2012-2721