CVE

Id
55547  
CVE No.
CVE-2012-2304  
Status
Candidate  
Description
The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579543 55547 CVE-2012-2304 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579544 55547 CVE-2012-2304 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579545 55547 CVE-2012-2304 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579546 55547 CVE-2012-2304 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579547 55547 CVE-2012-2304 MISC:http://drupal.org/node/1547738  View
579548 55547 CVE-2012-2304 CONFIRM:http://drupal.org/node/1547716  View
579549 55547 CVE-2012-2304 BID:53253  View
579550 55547 CVE-2012-2304 URL:http://www.securityfocus.com/bid/53253  View
579551 55547 CVE-2012-2304 OSVDB:81557  View
579552 55547 CVE-2012-2304 URL:http://www.osvdb.org/81557  View
579553 55547 CVE-2012-2304 SECUNIA:48900  View
579554 55547 CVE-2012-2304 URL:http://secunia.com/advisories/48900  View
579555 55547 CVE-2012-2304 XF:linkit-search-security-bypass(75183)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27692 JVNDB-2012-003399 Drupal 用の Glossify Internal Links Auto SEO モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用の Glossify Internal Links Auto SEO モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2309 55547 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003399.html  View