3.6

CVE-2012-5557

The User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, does not properly assign roles when there are more than three roles on the site and certain unspecified configurations, which might allow remote authenticated users to gain privileges by performing certain operations, as demonstrated by changing a password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
User Read-only Project ≫ User Readonly Version6.x-1.0
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version6.x-1.1
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version6.x-1.2
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version6.x-1.3
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version6.x-1.x Updatedev
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version7.x-1.0
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version7.x-1.1
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version7.x-1.2
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version7.x-1.3
   Drupal ≫ Drupal Version-
User Read-only Project ≫ User Readonly Version7.x-1.x Updatedev
   Drupal ≫ Drupal Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.351
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.6 3.9 4.9
AV:N/AC:H/Au:S/C:P/I:P/A:N
http://drupal.org/node/1840886
Patch
Vendor Advisory