Lucene search
HistoryNov 30, 2012 - 10:55 p.m.
CVE-2012-4475
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
58.6%
The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to edit an arbitrary user’s questions and answers via unspecified vectors.
Affected configurations
Node
security_questions_projectsecurity_questionsMatch6.x-1.0
ORsecurity_questions_projectsecurity_questionsMatch6.x-1.xdev
ORsecurity_questions_projectsecurity_questionsMatch7.x-1.0
ORsecurity_questions_projectsecurity_questionsMatch7.x-1.xdev
drupaldrupalMatch-
Related
drupal
drupal
SA-CONTRIB-2012-111 - Security Questions - Access Bypass
2012-07-11 00:00:00
cvelist
cvelist
CVE-2012-4475
2022-10-03 16:15:35
prion
prion
Code injection
2012-11-30 22:55:00
cve
cve
CVE-2012-4475
2022-10-03 16:15:35
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
58.6%
Related for NVD:CVE-2012-4475