CVE-2012-3385: Medium severity WordPress vulnerability
Published Jul 22, 2012
·Updated
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.
Affected Software
85 affected components
WordPress<=3.4.0
WordPress=0.71
WordPress=1.0
WordPress=1.0.1
WordPress=1.0.2
WordPress=1.1.1
WordPress=1.2
WordPress=1.2.1
WordPress=1.2.2
WordPress=1.2.3
WordPress=1.2.4
WordPress=1.2.5
WordPress=1.2.5-a
WordPress=1.3
WordPress=1.3.2
WordPress=1.3.3
WordPress=1.5
WordPress=1.5.1
WordPress=1.5.1.1
WordPress=1.5.1.2
WordPress=1.5.1.3
WordPress=1.5.2
WordPress=2.0
WordPress=2.0.1
WordPress=2.0.2
WordPress=2.0.4
WordPress=2.0.5
WordPress=2.0.6
WordPress=2.0.7
WordPress=2.0.8
WordPress=2.0.9
WordPress=2.0.10
WordPress=2.0.11
WordPress=2.1
WordPress=2.1.1
WordPress=2.1.2
WordPress=2.1.3
WordPress=2.2
WordPress=2.2.1
WordPress=2.2.2
WordPress=2.2.3
WordPress=2.3
WordPress=2.3.1
WordPress=2.3.2
WordPress=2.3.3
WordPress=2.5
WordPress=2.5.1
WordPress=2.6
WordPress=2.6.1
WordPress=2.6.2
WordPress=2.6.3
WordPress=2.6.5
WordPress=2.7
WordPress=2.7.1
WordPress=2.8
WordPress=2.8.1
WordPress=2.8.2
WordPress=2.8.3
WordPress=2.8.4
WordPress=2.8.4-a
WordPress=2.8.5
WordPress=2.8.5.1
WordPress=2.8.5.2
WordPress=2.8.6
WordPress=2.9
WordPress=2.9.1
WordPress=2.9.1.1
WordPress=2.9.2
WordPress=3.0
WordPress=3.0.1
WordPress=3.0.2
WordPress=3.0.3
WordPress=3.0.4
WordPress=3.0.5
WordPress=3.0.6
WordPress=3.1
WordPress=3.1.1
WordPress=3.1.2
WordPress=3.1.3
WordPress=3.1.4
WordPress=3.2
WordPress=3.2.1
WordPress=3.3
WordPress=3.3.2
WordPress=3.3.3
Event History
Jul 22, 2012
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3385?
CVE-2012-3385 is rated as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2012-3385?
To fix CVE-2012-3385, upgrade WordPress to version 3.4.1 or later.
3
What types of access does CVE-2012-3385 affect?
CVE-2012-3385 affects access to private or draft posts, allowing unauthorized viewing by remote authors or contributors.
4
Is CVE-2012-3385 specific to any WordPress versions?
Yes, CVE-2012-3385 affects WordPress versions prior to 3.4.1, including several earlier versions.
5
What can happen if CVE-2012-3385 is exploited?
Exploiting CVE-2012-3385 can allow unauthorized users to access and obtain sensitive post content.