Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4475
cve-2012-4475
drupal
security questions
remote access
vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
58.6%
The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to edit an arbitrary user’s questions and answers via unspecified vectors.
Affected configurations
Node
security_questions_projectsecurity_questionsMatch6.x-1.0
ORsecurity_questions_projectsecurity_questionsMatch6.x-1.xdev
ORsecurity_questions_projectsecurity_questionsMatch7.x-1.0
ORsecurity_questions_projectsecurity_questionsMatch7.x-1.xdev
drupaldrupalMatch-
Related
drupal
drupal
SA-CONTRIB-2012-111 - Security Questions - Access Bypass
2012-07-11 00:00:00
cvelist
cvelist
CVE-2012-4475
2022-10-03 16:15:35
nvd
nvd
CVE-2012-4475
2012-11-30 22:55:01
prion
prion
Code injection
2012-11-30 22:55:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
58.6%
Related for CVE-2012-4475