CVEvulnerability
CVE-2012-2721
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not properly check permissions when all users have the "access content" permission removed, which allows remote attackers to bypass access restrictions and possibly have other unspecified impact.
Affected configurations
• moshe weitzman organic groups 6.x-2.0
• moshe weitzman organic groups 6.x-2.1
• moshe weitzman organic groups 6.x-2.2
• moshe weitzman organic groups 6.x-2.3
• moshe weitzman organic groups 6.x-2.x
Related
Weakness · not in database (1)
References
- http://drupal.org/node/1619736 Patch
- http://drupal.org/node/1619810 Patch, Vendor Advisory
- http://drupalcode.org/project/og.git/commitdiff/1485708 Exploit, Patch
- http://secunia.com/advisories/49397 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/06/14/3 www.openwall.com
- http://www.osvdb.org/82728 www.osvdb.org
- http://www.securityfocus.com/bid/53838 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76150 exchange.xforce.ibmcloud.com
- http://drupal.org/node/1619736 Patch
- http://drupal.org/node/1619810 Patch, Vendor Advisory
- http://drupalcode.org/project/og.git/commitdiff/1485708 Exploit, Patch
- http://secunia.com/advisories/49397 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/06/14/3 www.openwall.com
- http://www.osvdb.org/82728 www.osvdb.org
- http://www.securityfocus.com/bid/53838 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76150 exchange.xforce.ibmcloud.com