CVE-2012-2702

The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote attackers to read all unassigned product keys via certain conditions related to the uid.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
tony_freixasubercart_product_keys
6.x-1.0:x
tony_freixasubercart_product_keys
6.x-1.0:x
tony_freixasubercart_product_keys
6.x-1.0:x
tony_freixasubercart_product_keys
6.x-1.0:x
tony_freixasubercart_product_keys
6.x-1.0:x
tony_freixasubercart_product_keys
6.x-1.0:x
tony_freixasubercart_product_keys
6.x-1.0:x
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://drupal.org/node/1580752
http://drupal.org/node/1585532
http://drupalcode.org/project/uc_product_keys.git/commitdiff/19fa261
http://osvdb.org/82005
http://secunia.com/advisories/49169
http://www.openwall.com/lists/oss-security/2012/06/14/3
https://exchange.xforce.ibmcloud.com/vulnerabilities/75720
http://drupal.org/node/1580752
http://drupal.org/node/1585532
http://drupalcode.org/project/uc_product_keys.git/commitdiff/19fa261
http://osvdb.org/82005
http://secunia.com/advisories/49169
http://www.openwall.com/lists/oss-security/2012/06/14/3
https://exchange.xforce.ibmcloud.com/vulnerabilities/75720