Lucene search
HistoryOct 31, 2012 - 4:55 p.m.
CVE-2012-4494
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.9%
The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass intended access restrictions and possibly have other impacts by logging in.
Affected configurations
Node
niifshibb_authMatch7.x-4.0
drupaldrupalMatch-
Related
prion
prion
Design/Logic Flaw
2012-10-31 16:55:00
cvelist
cvelist
CVE-2012-4494
2022-10-03 16:15:34
cve
cve
CVE-2012-4494
2022-10-03 16:15:34
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.9%
Related for NVD:CVE-2012-4494