NVD

Id
44446  
Name
CVE-2012-2731  
Description
The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-06-26  
Modified Date
2012-06-27  
Seq
2012-2731  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
223020 44446 CVE-2012-2731 http://drupal.org/node/1619586  View
223021 44446 CVE-2012-2731 http://drupal.org/node/1633048  View
223022 44446 CVE-2012-2731 http://drupalcode.org/project/uc_ajax_cart.git/commitdiff/b59cdd5  View
223023 44446 CVE-2012-2731 [oss-security] 20120613 Re: CVE Request for Drupal contributed modules  View
223024 44446 CVE-2012-2731 53999  View
223025 44446 CVE-2012-2731 uberart-ajax-info-disc(76332)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27211 JVNDB-2012-002918 Drupal 用 Ubercart AJAX Cart における重要な情報を取得される脆弱性 Drupal 用 Ubercart AJAX Cart には、ページの読み込み時に JavaScript の設定配列内の PHP セッション id を格納するため、重要な情報を取得される脆弱性が存在します。 CVE-2012-2731 55969 CVE-2012-2731 44446 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002918.html 2012-06-13 2012-06-29 View