CVE-2012-2303: High severity florian weber spaces vulnerability
Published Jul 18, 2012
·Updated
The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the (1) Spaces or (2) Spaces OG module.
Affected Software
15 affected components
Florian Weber Spaces=6.x-3.0
Florian Weber Spaces=6.x-3.0-alpha1
Florian Weber Spaces=6.x-3.0-alpha2
Florian Weber Spaces=6.x-3.0-beta1
Florian Weber Spaces=6.x-3.0-beta2
Florian Weber Spaces=6.x-3.0-beta3
Florian Weber Spaces=6.x-3.0-beta4
Florian Weber Spaces=6.x-3.0-beta5
Florian Weber Spaces=6.x-3.0-beta6
Florian Weber Spaces=6.x-3.0-r1
Florian Weber Spaces=6.x-3.0-r2
Florian Weber Spaces=6.x-3.1
Florian Weber Spaces=6.x-3.2
Florian Weber Spaces=6.x-3.3
Drupal Drupal
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jul 18, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2303?
CVE-2012-2303 has a medium severity rating due to its potential to leak sensitive information.
2
How do I fix CVE-2012-2303?
To fix CVE-2012-2303, update the Spaces module to version 6.x-3.4 or later.
3
Which Drupal versions are affected by CVE-2012-2303?
CVE-2012-2303 affects Spaces module versions 6.x-3.0 through 6.x-3.3.
4
What types of vulnerabilities does CVE-2012-2303 include?
CVE-2012-2303 includes vulnerabilities related to improper permission enforcement on non-object pages.
5
Can CVE-2012-2303 impact other modules in Drupal?
Yes, CVE-2012-2303 can potentially have other impacts affecting the Spaces OG module.