Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-1591
HistoryOct 01, 2012 - 12:00 a.m.

CVE-2012-1591

2012-10-0100:00:00
ubuntu.com
ubuntu.com
11

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

79.0%

The image module in Drupal 7.x before 7.14 does not properly check
permissions when caching derivative image styles of private images, which
allows remote attackers to read private image styles.

Bugs

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

79.0%