CVE-2012-2302: Infoleak
Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2302?
CVE-2012-2302 is considered a medium severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2012-2302?
To address CVE-2012-2302, update the Site Documentation module for Drupal to version 6.x-1.4 or later.
What systems are affected by CVE-2012-2302?
CVE-2012-2302 affects versions 6.x-1.0 through 6.x-1.3 of the Site Documentation module for Drupal.
What type of attack does CVE-2012-2302 enable?
CVE-2012-2302 allows remote attackers to access sensitive information through improper handling of save locations during archiving.
Is there a workaround for CVE-2012-2302?
There is no official workaround for CVE-2012-2302; the recommended action is to update the module to a secure version.