Vulnerability in Antoine Beaupre Hostmaster
CVE-2012-2707
The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access restrictions and edit unauthorized nodes.
EPSS: 0.024 (82.5th percentile) — read the EPSS interpretation.
Affected products
- Antoine_beaupre Hostmaster — versions 6.x-1.2, 6.x-1.3, 6.x-1.4
- Drupal
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (x_refsource_MISC, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM, Exploit, Patch)
- secalert@redhat.com (vdb-entry, x_refsource_BID)