5
CVE-2012-2704
- EPSS 0.36%
- Veröffentlicht 31.08.2012 20:55:00
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginThe Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
John Franklin ≫ Advertisement Version6.x-2.0
John Franklin ≫ Advertisement Version6.x-2.0 Updatealpha1
John Franklin ≫ Advertisement Version6.x-2.0 Updatealpha2
John Franklin ≫ Advertisement Version6.x-2.0 Updatebeta1
John Franklin ≫ Advertisement Version6.x-2.0 Updatebeta2
John Franklin ≫ Advertisement Version6.x-2.0 Updatebeta3
John Franklin ≫ Advertisement Version6.x-2.0 Updatebeta4
John Franklin ≫ Advertisement Version6.x-2.0 Updatebeta5
John Franklin ≫ Advertisement Version6.x-2.0 Updatebeta6
John Franklin ≫ Advertisement Version6.x-2.0-rc1
John Franklin ≫ Advertisement Version6.x-2.1
John Franklin ≫ Advertisement Version6.x-2.1 Updaterc1
John Franklin ≫ Advertisement Version6.x-2.2
John Franklin ≫ Advertisement Version6.x-2.2 Updaterc1
John Franklin ≫ Advertisement Version6.x-2.3 Updatebeta1
John Franklin ≫ Advertisement Version6.x-2.3 Updatedev
John Franklin ≫ Advertisement Version6.x-2.x
John Franklin ≫ Advertisement Version6.x-2.x Updatedev
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.55 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|