CVE Reference: CVE-2012-1643

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2012-1643

Description:
The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vectors.

CVE Status:
Candidate

References:

SAID
  Secunia Advisory: SA48019

OSVDB
  79316

MLIST
  http://www.openwall.com/lists/oss-security/2012/04/07/1

MISC

CONFIRM
  http://drupal.org/node/1441556
  http://drupalcode.org/project/fp.git/commitdiff/39e7587


Return to the previous page.