CVEvulnerability
CVE-2012-2061
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."
Affected configurations
• nijskens raf admintools
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://drupal.org/node/1482126 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/04/07/1 www.openwall.com
- http://www.securityfocus.com/bid/52502 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74058 exchange.xforce.ibmcloud.com
- http://drupal.org/node/1482126 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/04/07/1 www.openwall.com
- http://www.securityfocus.com/bid/52502 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74058 exchange.xforce.ibmcloud.com