3.6

CVE-2012-5557

The User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, does not properly assign roles when there are more than three roles on the site and certain unspecified configurations, which might allow remote authenticated users to gain privileges by performing certain operations, as demonstrated by changing a password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
User Read-only Project ≫ User Readonly Version 6.x-1.0
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 6.x-1.1
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 6.x-1.2
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 6.x-1.3
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 6.x-1.x Update dev
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 7.x-1.0
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 7.x-1.1
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 7.x-1.2
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 7.x-1.3
   Drupal ≫ Drupal Version -
User Read-only Project ≫ User Readonly Version 7.x-1.x Update dev
   Drupal ≫ Drupal Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.43% 0.696
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.6 3.9 4.9
AV:N/AC:H/Au:S/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2012/11/20/4
http://drupal.org/node/1840038
Patch
http://drupal.org/node/1840054
Patch
http://drupal.org/node/1840886
Patch
Vendor Advisory