CVE

Id
56628  
CVE No.
CVE-2012-3385  
Status
Candidate  
Description
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.  
Phase
Assigned (20120614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
586200 56628 CVE-2012-3385 MLIST:[oss-security] 20120702 CVE #"s for WordPress 3.4.1 release  View
586201 56628 CVE-2012-3385 URL:http://www.openwall.com/lists/oss-security/2012/07/02/1  View
586202 56628 CVE-2012-3385 MLIST:[oss-security] 20120707 Re: CVE #"s for WordPress 3.4.1 release  View
586203 56628 CVE-2012-3385 URL:http://www.openwall.com/lists/oss-security/2012/07/08/1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27573 JVNDB-2012-003280 Moodle の lib/filelib.php における重要な情報を取得される脆弱性 Moodle の lib/filelib.php は、ブロックを非表示にされた後、ファイルへのアクセスを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2012-3390 56628 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003280.html  View