NVD

Id
44421  
Name
CVE-2012-2704  
Description
The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-08-31  
Modified Date
2012-09-03  
Seq
2012-2704  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222885 44421 CVE-2012-2704 http://drupal.org/node/1585544  View
222886 44421 CVE-2012-2704 http://drupalcode.org/project/ad.git/commitdiff/c2ffab2  View
222887 44421 CVE-2012-2704 [oss-security] 20120613 Re: CVE Request for Drupal contributed modules  View
222888 44421 CVE-2012-2704 advertisement-settings-info-disclosure(75719)  View
222889 44421 CVE-2012-2704 https://drupal.org/node/1580376  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28330 JVNDB-2012-004037 Drupal 用 Advertisement モジュールにおけるサイトの重要な設定情報を取得される脆弱性 Drupal 用 Advertisement モジュールは、デバッグ情報へのアクセスを適切に制限しないため、サイトの重要な設定情報を取得される脆弱性が存在します。 CVE-2012-2704 55942 CVE-2012-2704 44421 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004037.html 2012-05-16 2012-09-05 View