CVEvulnerability
CVE-2012-5651
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-01-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.
Affected configurations
• drupal drupal 6.0
• drupal drupal 6.1
• drupal drupal 6.2
• drupal drupal 6.3
• drupal drupal 6.4
• drupal drupal 6.5
• drupal drupal 6.6
• drupal drupal 6.7
• drupal drupal 6.8
• drupal drupal 6.9
• drupal drupal 6.10
• drupal drupal 6.11
• drupal drupal 6.12
• drupal drupal 6.13
• drupal drupal 6.14
• drupal drupal 6.15
• drupal drupal 6.16
• drupal drupal 6.17
• drupal drupal 6.18
• drupal drupal 6.19
• drupal drupal 6.20
• drupal drupal 6.21
• drupal drupal 6.22
• drupal drupal 6.23
• drupal drupal 6.24
• drupal drupal 6.25
• drupal drupal 6.26
• drupal drupal 7.0
• drupal drupal 7.1
• drupal drupal 7.2
• drupal drupal 7.3
• drupal drupal 7.4
• drupal drupal 7.5
• drupal drupal 7.6
• drupal drupal 7.7
• drupal drupal 7.8
• drupal drupal 7.9
• drupal drupal 7.10
• drupal drupal 7.11
• drupal drupal 7.12
• drupal drupal 7.13
• drupal drupal 7.14
• drupal drupal 7.15
• drupal drupal 7.16
• drupal drupal 7.17
• drupal drupal 7.x-dev
Related
Weakness · not in database (1)
References
- http://drupal.org/SA-CORE-2012-004 Patch, Vendor Advisory
- http://drupalcode.org/project/drupal.git/commitdiff/b47f95d Patch
- http://drupalcode.org/project/drupal.git/commitdiff/da8023a Patch
- http://www.debian.org/security/2013/dsa-2776 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2012/12/20/1 www.openwall.com
- http://www.osvdb.org/88528 www.osvdb.org
- http://www.securityfocus.com/bid/56993 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80792 exchange.xforce.ibmcloud.com
- http://drupal.org/SA-CORE-2012-004 Patch, Vendor Advisory
- http://drupalcode.org/project/drupal.git/commitdiff/b47f95d Patch
- http://drupalcode.org/project/drupal.git/commitdiff/da8023a Patch
- http://www.debian.org/security/2013/dsa-2776 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2012/12/20/1 www.openwall.com
- http://www.osvdb.org/88528 www.osvdb.org
- http://www.securityfocus.com/bid/56993 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80792 exchange.xforce.ibmcloud.com