CVE-2012-1649

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:N/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
danielbcool_aid
𝑥
≤ 6.x-1.8
danielbcool_aid
6.x-1.0:x
danielbcool_aid
6.x-1.1:x
danielbcool_aid
6.x-1.2:x
danielbcool_aid
6.x-1.3:x
danielbcool_aid
6.x-1.4:x
danielbcool_aid
6.x-1.6:x
danielbcool_aid
6.x-1.7:x
danielbcool_aid
6.x-1.x:x
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://drupal.org/node/1417186
http://drupal.org/node/1461438
http://secunia.com/advisories/48196
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.osvdb.org/79772
http://www.securityfocus.com/bid/52232
https://exchange.xforce.ibmcloud.com/vulnerabilities/73608
http://drupal.org/node/1417186
http://drupal.org/node/1461438
http://secunia.com/advisories/48196
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.osvdb.org/79772
http://www.securityfocus.com/bid/52232
https://exchange.xforce.ibmcloud.com/vulnerabilities/73608