Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4494
cve-2012-4494
shibboleth
authentication module
drupal
remote access vulnerability
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.9%
The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass intended access restrictions and possibly have other impacts by logging in.
Affected configurations
Node
niifshibb_authMatch7.x-4.0
drupaldrupalMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| niif:shibb_auth | niif shibb auth | eq | 7.x-4.0 |
Related
prion
prion
Design/Logic Flaw
2012-10-31 16:55:00
nvd
nvd
CVE-2012-4494
2012-10-31 16:55:03
cvelist
cvelist
CVE-2012-4494
2022-10-03 16:15:34
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.9%
Related for CVE-2012-4494