NVD

Id
43522  
Name
CVE-2012-1650  
Description
The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-28  
Modified Date
2012-08-29  
Seq
2012-1650  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218744 43522 CVE-2012-1650 http://drupalcode.org/project/zipcart.git/commitdiff/fe143c2  View
218745 43522 CVE-2012-1650 [oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
218746 43522 CVE-2012-1650 52231  View
218747 43522 CVE-2012-1650 zipcart-archives-security-bypass(73609)  View
218748 43522 CVE-2012-1650 https://drupal.org/node/1460892  View
218749 43522 CVE-2012-1650 https://drupal.org/node/1461446  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28289 JVNDB-2012-003996 Drupal 用 ZipCart モジュールにおけるアクセス制限を回避される脆弱性 Drupal 用 ZipCart モジュールには、アーカイブをビルドする際、"access ZipCart downloads" パーミッションの代わりに、"access content" パーミッションの確認を行うため、アクセス制限を回避される脆弱性が存在します。 CVE-2012-1650 54888 CVE-2012-1650 43522 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003996.html 2012-02-29 2012-08-31 View