CVE-2012-1650

The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions.

CVSS v2.0 6.0 MEDIUM

6.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability : 6.8 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.osvdb.org/79766
https://drupal.org/node/1461446	Patch Vendor Advisory
http://drupalcode.org/project/zipcart.git/commitdiff/fe143c2	Patch
http://www.openwall.com/lists/oss-security/2012/04/07/1
https://drupal.org/node/1460892	Patch
http://www.securityfocus.com/bid/52231
https://exchange.xforce.ibmcloud.com/vulnerabilities/73609

Advertisement

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:giantrobot:zipcart:6.x-1.3:::::::*
	cpe:2.3:a:giantrobot:zipcart:6.x-1.2:::::::*
	cpe:2.3:a:giantrobot:zipcart:6.x-1.x:dev::::::

cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

Information

Published : 2012-08-28 10:55

Updated : 2017-08-28 18:31

NVD link : CVE-2012-1650

Mitre link : CVE-2012-1650

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Advertisement

Products Affected

drupal

drupal

giantrobot

zipcart

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.osvdb.org/79766", "name": "79766", "tags": [], "refsource": "OSVDB"}, {"url": "https://drupal.org/node/1461446", "name": "https://drupal.org/node/1461446", "tags": ["Patch", "Vendor Advisory"], "refsource": "MISC"}, {"url": "http://drupalcode.org/project/zipcart.git/commitdiff/fe143c2", "name": "http://drupalcode.org/project/zipcart.git/commitdiff/fe143c2", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://www.openwall.com/lists/oss-security/2012/04/07/1", "name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "tags": [], "refsource": "MLIST"}, {"url": "https://drupal.org/node/1460892", "name": "https://drupal.org/node/1460892", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/52231", "name": "52231", "tags": [], "refsource": "BID"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73609", "name": "zipcart-archives-security-bypass(73609)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The ZipCart module 6.x before 6.x-1.4 for Drupal checks the \"access content\" permission instead of the \"access ZipCart downloads\" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2012-1650", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2012-08-28T17:55Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:giantrobot:zipcart:6.x-1.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:giantrobot:zipcart:6.x-1.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:giantrobot:zipcart:6.x-1.x:dev:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-29T01:31Z"}