2.1

CVE-2012-5586

The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vectors related to the "user index method" and "the path to the user resource."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Marc Ingram ≫ Services Version6.x-3.0
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updatealpha1
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updatebeta1
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updatebeta2
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updaterc1
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updaterc2
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updaterc3
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updaterc4
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updateunstable1
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updateunstable2
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.0 Updateunstable3
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.1
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.2
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version6.x-3.x Updatedev
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0 Updatebeta1
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0 Updatebeta2
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0 Updaterc1
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0 Updaterc2
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0 Updaterc3
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0 Updaterc4
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0 Updaterc5
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.0 Updaterc6
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.1
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.2
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.3
   Drupal ≫ Drupal Version-
Marc Ingram ≫ Services Version7.x-3.x Updatedev
   Drupal ≫ Drupal Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.456
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:N/AC:H/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://drupal.org/node/1853200
Patch
Vendor Advisory