CVE-2012-4483: Medium severity acquia commons vulnerability
The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensitive information via the recent comments listing.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4483?
CVE-2012-4483 has a moderate severity rating due to its potential impact on node access restrictions in the Drupal Commons module.
How do I fix CVE-2012-4483?
To fix CVE-2012-4483, upgrade the Drupal Commons module to version 6.x-2.8 or later.
What versions of Acquia Commons are affected by CVE-2012-4483?
CVE-2012-4483 affects Acquia Commons versions 6.x-2.4 through 6.x-2.7.
Can CVE-2012-4483 be exploited remotely?
Yes, CVE-2012-4483 can be exploited remotely by attackers to bypass intended node access restrictions.
Is Drupal core vulnerable to CVE-2012-4483?
No, Drupal core is not vulnerable to CVE-2012-4483; the issue is specific to the Drupal Commons module.