Vulnerability Details CVE-2012-4483
The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_default.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensitive information via the recent comments listing.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.3%
CVSS Severity
CVSS v2 Score 5.0
References
- http://drupal.org/node/1679820
- http://drupal.org/node/1679908
- http://drupalcode.org/project/commons.git/commitdiff/8ef688b
- http://www.openwall.com/lists/oss-security/2012/10/04/6
- http://www.openwall.com/lists/oss-security/2012/10/07/1
- http://drupal.org/node/1679820
- http://drupal.org/node/1679908
- http://drupalcode.org/project/commons.git/commitdiff/8ef688b
- http://www.openwall.com/lists/oss-security/2012/10/04/6
- http://www.openwall.com/lists/oss-security/2012/10/07/1
Products affected by CVE-2012-4483
-
cpe:2.3:a:acquia:commons:6.x-2.4
-
cpe:2.3:a:acquia:commons:6.x-2.5
-
cpe:2.3:a:acquia:commons:6.x-2.6
-
cpe:2.3:a:acquia:commons:6.x-2.7
-
cpe:2.3:a:acquia:commons:6.x-2.x
-
cpe:2.3:a:drupal:drupal:-