CVE-2012-1642 - includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensitive information via unspecified vectors

Back Back to CVE browser

MEDIUM

includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensitive information via unspecified vectors

Published Aug 28, 2012

5.0

MEDIUM

CVSS 2.0

EPSS 2.25%

Description

includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (6)

http://drupal.org/node/1440508
x_refsource_CONFIRMPatch
http://drupalcode.org/project/linkchecker.git/commit/fef0ddf
x_refsource_CONFIRMPatch
http://secunia.com/advisories/48022
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.openwall.com/lists/oss-security/2012/04/07/1
mailing-listx_refsource_MLIST
http://www.osvdb.org/79315
vdb-entryx_refsource_OSVDB
https://drupal.org/node/1441252
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
http://drupal.org/node/1440508		x_refsource_CONFIRMPatch
http://drupalcode.org/project/linkchecker.git/commit/fef0ddf		x_refsource_CONFIRMPatch
http://secunia.com/advisories/48022		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.openwall.com/lists/oss-security/2012/04/07/1		mailing-listx_refsource_MLIST
http://www.osvdb.org/79315		vdb-entryx_refsource_OSVDB
https://drupal.org/node/1441252		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published Aug 28, 2012

Updated Sep 16, 2024

Reserved Mar 12, 2012

Link CVE-2012-1642

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2012-1642

Red Hat

Severity n/a

Public date n/a

Links CVE-2012-1642