CVE-2012-5651

Description

Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/80792

http://www.securityfocus.com/bid/56993

http://www.osvdb.org/88528

http://www.openwall.com/lists/oss-security/2012/12/20/1

http://www.mandriva.com/security/advisories?name=MDVSA-2013:074

http://www.debian.org/security/2013/dsa-2776

http://drupalcode.org/project/drupal.git/commitdiff/da8023a

http://drupalcode.org/project/drupal.git/commitdiff/b47f95d

http://drupal.org/SA-CORE-2012-004

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3