CVE

Id
55546  
CVE No.
CVE-2012-2303  
Status
Candidate  
Description
The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the (1) Spaces or (2) Spaces OG module.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579531 55546 CVE-2012-2303 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579532 55546 CVE-2012-2303 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579533 55546 CVE-2012-2303 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579534 55546 CVE-2012-2303 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579535 55546 CVE-2012-2303 MISC:http://drupal.org/node/1547736  View
579536 55546 CVE-2012-2303 CONFIRM:http://drupal.org/node/1547730  View
579537 55546 CVE-2012-2303 CONFIRM:http://drupalcode.org/project/spaces.git/commitdiff/cee919c  View
579538 55546 CVE-2012-2303 BID:53252  View
579539 55546 CVE-2012-2303 URL:http://www.securityfocus.com/bid/53252  View
579540 55546 CVE-2012-2303 OSVDB:81556  View
579541 55546 CVE-2012-2303 URL:http://www.osvdb.org/81556  View
579542 55546 CVE-2012-2303 SECUNIA:48930  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27691 JVNDB-2012-003398 Drupal 用の Taxonomy Grid : Catalog モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用の Taxonomy Grid : Catalog モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2308 55546 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003398.html  View