What is the severity of CVE-2012-4554?

The severity of CVE-2012-4554 is classified as a critical vulnerability due to its potential for remote file access.

How do I fix CVE-2012-4554?

To fix CVE-2012-4554, you should upgrade your Drupal installation to version 7.16 or later.

What systems are affected by CVE-2012-4554?

CVE-2012-4554 affects all versions of Drupal 7.x prior to 7.16.

What type of vulnerability is CVE-2012-4554?

CVE-2012-4554 is a file disclosure vulnerability that allows remote OpenID servers to read arbitrary files.

Is my data at risk if I am using an affected version of Drupal for CVE-2012-4554?

Yes, using an affected version of Drupal for CVE-2012-4554 puts your data at risk of unauthorized access.

Vulnerability/
CVE-2012-4554

medium

CWE

264

11/11/2012

17/9/2024

CVE-2012-4554

First published: Sun Nov 11 2012(Updated: )

The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
Drupal Drupal	=7.0
Drupal Drupal	=7.0-alpha1
Drupal Drupal	=7.0-alpha2
Drupal Drupal	=7.0-alpha3
Drupal Drupal	=7.0-alpha4
Drupal Drupal	=7.0-alpha5
Drupal Drupal	=7.0-alpha6
Drupal Drupal	=7.0-alpha7
Drupal Drupal	=7.0-beta1
Drupal Drupal	=7.0-beta2
Drupal Drupal	=7.0-beta3
Drupal Drupal	=7.0-dev
Drupal Drupal	=7.0-rc1
Drupal Drupal	=7.0-rc2
Drupal Drupal	=7.0-rc3
Drupal Drupal	=7.0-rc4
Drupal Drupal	=7.1
Drupal Drupal	=7.2
Drupal Drupal	=7.3
Drupal Drupal	=7.4
Drupal Drupal	=7.5
Drupal Drupal	=7.6
Drupal Drupal	=7.7
Drupal Drupal	=7.8
Drupal Drupal	=7.9
Drupal Drupal	=7.10
Drupal Drupal	=7.11
Drupal Drupal	=7.12
Drupal Drupal	=7.13
Drupal Drupal	=7.14
Drupal Drupal	=7.15

Remedy

http://drupal.org/node/1815912

Remedy

http://drupalcode.org/project/drupal.git/commit/b912710

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-4554?
The severity of CVE-2012-4554 is classified as a critical vulnerability due to its potential for remote file access.
How do I fix CVE-2012-4554?
To fix CVE-2012-4554, you should upgrade your Drupal installation to version 7.16 or later.
What systems are affected by CVE-2012-4554?
CVE-2012-4554 affects all versions of Drupal 7.x prior to 7.16.
What type of vulnerability is CVE-2012-4554?
CVE-2012-4554 is a file disclosure vulnerability that allows remote OpenID servers to read arbitrary files.
Is my data at risk if I am using an affected version of Drupal for CVE-2012-4554?
Yes, using an affected version of Drupal for CVE-2012-4554 puts your data at risk of unauthorized access.

collector/nvd-index
agent/references
agent/type
agent/softwarecombine
agent/remedy
agent/severity
agent/author
agent/weakness
agent/tags
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
vendor/drupal
canonical/drupal drupal
version/drupal drupal/7.0
version/drupal drupal/7.0-alpha1
version/drupal drupal/7.0-alpha2
version/drupal drupal/7.0-alpha3
version/drupal drupal/7.0-alpha4
version/drupal drupal/7.0-alpha5
version/drupal drupal/7.0-alpha6
version/drupal drupal/7.0-alpha7
version/drupal drupal/7.0-beta1
version/drupal drupal/7.0-beta2
version/drupal drupal/7.0-beta3
version/drupal drupal/7.0-dev
version/drupal drupal/7.0-rc1
version/drupal drupal/7.0-rc2
version/drupal drupal/7.0-rc3
version/drupal drupal/7.0-rc4
version/drupal drupal/7.1
version/drupal drupal/7.2
version/drupal drupal/7.3
version/drupal drupal/7.4
version/drupal drupal/7.5
version/drupal drupal/7.6
version/drupal drupal/7.7
version/drupal drupal/7.8
version/drupal drupal/7.9
version/drupal drupal/7.10
version/drupal drupal/7.11
version/drupal drupal/7.12
version/drupal drupal/7.13
version/drupal drupal/7.14
version/drupal drupal/7.15

Frequently Asked Questions

What is the severity of CVE-2012-4554?
The severity of CVE-2012-4554 is classified as a critical vulnerability due to its potential for remote file access.
How do I fix CVE-2012-4554?
To fix CVE-2012-4554, you should upgrade your Drupal installation to version 7.16 or later.
What systems are affected by CVE-2012-4554?
CVE-2012-4554 affects all versions of Drupal 7.x prior to 7.16.
What type of vulnerability is CVE-2012-4554?
CVE-2012-4554 is a file disclosure vulnerability that allows remote OpenID servers to read arbitrary files.
Is my data at risk if I am using an affected version of Drupal for CVE-2012-4554?
Yes, using an affected version of Drupal for CVE-2012-4554 puts your data at risk of unauthorized access.

CVE-2012-4554

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-4554?

How do I fix CVE-2012-4554?

What systems are affected by CVE-2012-4554?

What type of vulnerability is CVE-2012-4554?

Is my data at risk if I am using an affected version of Drupal for CVE-2012-4554?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2012-4554?

How do I fix CVE-2012-4554?

What systems are affected by CVE-2012-4554?

What type of vulnerability is CVE-2012-4554?

Is my data at risk if I am using an affected version of Drupal for CVE-2012-4554?