CVE-2012-1649

EUVD-2012-1659
Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
danielbcool_aid
𝑥
≤ 6.x-1.8
danielbcool_aid
6.x-1.0:x
danielbcool_aid
6.x-1.1:x
danielbcool_aid
6.x-1.2:x
danielbcool_aid
6.x-1.3:x
danielbcool_aid
6.x-1.4:x
danielbcool_aid
6.x-1.6:x
danielbcool_aid
6.x-1.7:x
danielbcool_aid
6.x-1.x:x
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://drupal.org/node/1417186
http://drupal.org/node/1461438
http://secunia.com/advisories/48196
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.osvdb.org/79772
http://www.securityfocus.com/bid/52232
https://exchange.xforce.ibmcloud.com/vulnerabilities/73608
http://drupal.org/node/1417186
http://drupal.org/node/1461438
http://secunia.com/advisories/48196
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.osvdb.org/79772
http://www.securityfocus.com/bid/52232
https://exchange.xforce.ibmcloud.com/vulnerabilities/73608