CVE-2012-4498: High severity morbus iff activism vulnerability
Published Nov 2, 2012
·Updated
The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow remote attackers to bypass access restrictions and possibly have other unspecified impact.
Affected Software
3 affected components
Morbus Iff Activism=6.x-2.0
Morbus Iff Activism=6.x-2.x-dev
Drupal Drupal
Remediation
Patch Available
Patch Available
Event History
Nov 2, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4498?
CVE-2012-4498 is considered to have a moderate severity due to the potential for unauthorized access to 'Campaign' content.
2
How do I fix CVE-2012-4498?
To fix CVE-2012-4498, upgrade the Activism module to version 6.x-2.1 or later.
3
What versions of the Activism module are affected by CVE-2012-4498?
CVE-2012-4498 affects versions 6.x-2.0 and 6.x-2.x-dev of the Activism module.
4
What impact does CVE-2012-4498 have?
CVE-2012-4498 allows remote attackers to bypass access restrictions possibly leading to unauthorized actions.
5
Is my Drupal installation at risk due to CVE-2012-4498?
If you are using Activism module version 6.x-2.0 or 6.x-2.x-dev with Drupal, your installation is at risk from CVE-2012-4498.