Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-0825
6.8
MEDIUMCVSS v2
Published
October 28, 2013
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Drupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 6.0, = 6.2, = 6.14, = 7.8, = 7.3, = 6.12, = 6.13, = 7.6, = 7.5, = 6.11, = 6.18, = 7.10, = 7.9, = 7.7, = 6.1, = 6.16, = 6.17, = 7.4, = 6.20, = 6.10, = 6.19, = 7.x-dev, = 7.2, = 7.1, = 7.x, = 6.15, = 6.21, = 6.22, = 6.23NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 6.0, = 6.2, = 6.14, = 7.8, = 7.3, = 6.12, = 6.13, = 7.6, = 7.5, = 6.11, = 6.18, = 7.10, = 7.9, = 7.7, = 6.1, = 6.16, = 6.17, = 7.4, = 6.20, = 6.10, = 6.19, = 7.x-dev, = 7.2, = 7.1, = 7.x, = 6.15, = 6.21, = 6.22, = 6.23NVD