Lucene search
RedhatCVE-2012-4471HistoryNov 30, 2012 - 10:55 p.m.
CVE-2012-4471
2012-11-3022:55:00
CWE-264
redhat
web.nvd.nist.gov
25
cve-2012-4471
drupal
search autocomplete
security vulnerability
nvd
access restriction
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
71.8%
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.
Affected configurations
Node
dominique_clausesearch_autocompleteMatch7.x-2.0
ORdominique_clausesearch_autocompleteMatch7.x-2.1
ORdominique_clausesearch_autocompleteMatch7.x-2.3
ORdominique_clausesearch_autocompleteMatch7.x-2.xdev
drupaldrupalMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dominique_clause | search_autocomplete | 7.x-2.0 | cpe:2.3:a:dominique_clause:search_autocomplete:7.x-2.0:*:*:*:*:*:*:* |
| dominique_clause | search_autocomplete | 7.x-2.1 | cpe:2.3:a:dominique_clause:search_autocomplete:7.x-2.1:*:*:*:*:*:*:* |
| dominique_clause | search_autocomplete | 7.x-2.3 | cpe:2.3:a:dominique_clause:search_autocomplete:7.x-2.3:*:*:*:*:*:*:* |
| dominique_clause | search_autocomplete | 7.x-2.x | cpe:2.3:a:dominique_clause:search_autocomplete:7.x-2.x:dev:*:*:*:*:*:* |
| drupal | drupal | - | cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:* |
Related
drupal
drupal
SA-CONTRIB-2012-107 - Search autocomplete - Access bypass
2012-07-11 00:00:00
cvelist
cvelist
CVE-2012-4471
2012-11-30 22:00:00
prion
prion
Design/Logic Flaw
2012-11-30 22:55:00
nvd
nvd
CVE-2012-4471
2012-11-30 22:55:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
71.8%
Related for CVE-2012-4471