Lucene search
HistoryJun 27, 2012 - 12:55 a.m.
CVE-2012-2702
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.017
Percentile
87.7%
The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote attackers to read all unassigned product keys via certain conditions related to the uid.
Affected configurations
Node
tony_freixasubercart_product_keysMatch6.x-1.0
ORtony_freixasubercart_product_keysMatch6.x-1.0alpha1
ORtony_freixasubercart_product_keysMatch6.x-1.0alpha2
ORtony_freixasubercart_product_keysMatch6.x-1.0alpha3
ORtony_freixasubercart_product_keysMatch6.x-1.0beta1
ORtony_freixasubercart_product_keysMatch6.x-1.0rc1
ORtony_freixasubercart_product_keysMatch6.x-1.0rc2
drupaldrupalMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tony_freixas | ubercart_product_keys | 6.x-1.0 | cpe:2.3:a:tony_freixas:ubercart_product_keys:6.x-1.0:*:*:*:*:*:*:* |
| tony_freixas | ubercart_product_keys | 6.x-1.0 | cpe:2.3:a:tony_freixas:ubercart_product_keys:6.x-1.0:alpha1:*:*:*:*:*:* |
| tony_freixas | ubercart_product_keys | 6.x-1.0 | cpe:2.3:a:tony_freixas:ubercart_product_keys:6.x-1.0:alpha2:*:*:*:*:*:* |
| tony_freixas | ubercart_product_keys | 6.x-1.0 | cpe:2.3:a:tony_freixas:ubercart_product_keys:6.x-1.0:alpha3:*:*:*:*:*:* |
| tony_freixas | ubercart_product_keys | 6.x-1.0 | cpe:2.3:a:tony_freixas:ubercart_product_keys:6.x-1.0:beta1:*:*:*:*:*:* |
| tony_freixas | ubercart_product_keys | 6.x-1.0 | cpe:2.3:a:tony_freixas:ubercart_product_keys:6.x-1.0:rc1:*:*:*:*:*:* |
| tony_freixas | ubercart_product_keys | 6.x-1.0 | cpe:2.3:a:tony_freixas:ubercart_product_keys:6.x-1.0:rc2:*:*:*:*:*:* |
| drupal | drupal | - | cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-2702
2012-06-27 00:00:00
drupal
drupal
SA-CONTRIB-2012-076 - Ubercart Product Keys Access Bypass
2012-05-16 00:00:00
cve
cve
CVE-2012-2702
2012-06-27 00:55:02
prion
prion
Buffer overflow
2012-06-27 00:55:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.017
Percentile
87.7%
Related for NVD:CVE-2012-2702