CVE

Id
55542  
CVE No.
CVE-2012-2299  
Status
Candidate  
Description
The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579489 55542 CVE-2012-2299 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579490 55542 CVE-2012-2299 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579491 55542 CVE-2012-2299 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579492 55542 CVE-2012-2299 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579493 55542 CVE-2012-2299 MISC:http://drupal.org/node/1547674  View
579494 55542 CVE-2012-2299 CONFIRM:http://drupal.org/node/1547506  View
579495 55542 CVE-2012-2299 CONFIRM:http://drupal.org/node/1547508  View
579496 55542 CVE-2012-2299 CONFIRM:http://drupalcode.org/project/ubercart.git/commitdiff/035d2cb  View
579497 55542 CVE-2012-2299 CONFIRM:http://drupalcode.org/project/ubercart.git/commitdiff/8c61e84  View
579498 55542 CVE-2012-2299 BID:53251  View
579499 55542 CVE-2012-2299 URL:http://www.securityfocus.com/bid/53251  View
579500 55542 CVE-2012-2299 SECUNIA:48935  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27972 JVNDB-2012-003679 Drupal 用 Linkit モジュールにおける重要な情報を取得される脆弱性 Drupal 用 Linkit モジュールは、エントリアクセスモジュールを使用する際、エンティティの検索時のパーミッションをチェックしないため、重要な情報を取得される脆弱性が存在します。 CVE-2012-2304 55542 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003679.html  View