CVE

Id
58894  
CVE No.
CVE-2012-5651  
Status
Candidate  
Description
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602282 58894 CVE-2012-5651 MLIST:[oss-security] 20121219 Re: CVE request for Drupal core, and contributed modules  View
602283 58894 CVE-2012-5651 URL:http://www.openwall.com/lists/oss-security/2012/12/20/1  View
602284 58894 CVE-2012-5651 CONFIRM:http://drupal.org/SA-CORE-2012-004  View
602285 58894 CVE-2012-5651 CONFIRM:http://drupalcode.org/project/drupal.git/commitdiff/b47f95d  View
602286 58894 CVE-2012-5651 CONFIRM:http://drupalcode.org/project/drupal.git/commitdiff/da8023a  View
602287 58894 CVE-2012-5651 DEBIAN:DSA-2776  View
602288 58894 CVE-2012-5651 URL:http://www.debian.org/security/2013/dsa-2776  View
602289 58894 CVE-2012-5651 MANDRIVA:MDVSA-2013:074  View
602290 58894 CVE-2012-5651 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:074  View
602291 58894 CVE-2012-5651 BID:56993  View
602292 58894 CVE-2012-5651 URL:http://www.securityfocus.com/bid/56993  View
602293 58894 CVE-2012-5651 OSVDB:88528  View
602294 58894 CVE-2012-5651 URL:http://www.osvdb.org/88528  View
602295 58894 CVE-2012-5651 XF:drupalcore-user-information-disclosure(80792)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30200 JVNDB-2012-005907 Inkscape のラスタ化プロセスにおける任意のファイルを読まれる脆弱性 Inkscape のラスタ化プロセスには、任意のファイルを読まれる脆弱性が存在します。 CVE-2012-5656 58894 2.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005907.html  View