5

CVE-2012-1591

The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read private image styles.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version 7.0
Drupal ≫ Drupal Version 7.0 Update alpha1
Drupal ≫ Drupal Version 7.0 Update alpha2
Drupal ≫ Drupal Version 7.0 Update alpha3
Drupal ≫ Drupal Version 7.0 Update alpha4
Drupal ≫ Drupal Version 7.0 Update alpha5
Drupal ≫ Drupal Version 7.0 Update alpha6
Drupal ≫ Drupal Version 7.0 Update alpha7
Drupal ≫ Drupal Version 7.0 Update beta1
Drupal ≫ Drupal Version 7.0 Update beta2
Drupal ≫ Drupal Version 7.0 Update beta3
Drupal ≫ Drupal Version 7.0 Update dev
Drupal ≫ Drupal Version 7.0 Update rc1
Drupal ≫ Drupal Version 7.0 Update rc2
Drupal ≫ Drupal Version 7.0 Update rc3
Drupal ≫ Drupal Version 7.0 Update rc4
Drupal ≫ Drupal Version 7.1
Drupal ≫ Drupal Version 7.2
Drupal ≫ Drupal Version 7.3
Drupal ≫ Drupal Version 7.4
Drupal ≫ Drupal Version 7.5
Drupal ≫ Drupal Version 7.6
Drupal ≫ Drupal Version 7.7
Drupal ≫ Drupal Version 7.8
Drupal ≫ Drupal Version 7.9
Drupal ≫ Drupal Version 7.10
Drupal ≫ Drupal Version 7.11
Drupal ≫ Drupal Version 7.12
Drupal ≫ Drupal Version 7.13
Drupal ≫ Drupal Version 7.x-dev
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.4% 0.819
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://drupal.org/node/1557938
Vendor Advisory
http://secunia.com/advisories/49012
http://www.mandriva.com/security/advisories?name=MDVSA-2013:074
http://drupal.org/drupal-7.14
Patch
http://www.securityfocus.com/bid/53359
http://drupal.org/node/1507988
http://drupalcode.org/project/drupal.git/commit/3bf6761ff7537dc68e22ea73f155134f3cfd41a8