CVE-2012-2707

MEDIUM 5.8CVE-2012-2707 · Published 27/06/2012 · updated 16/06/2026

In short

CVE-2012-2707 is a MEDIUM (CVSS 5.8) vulnerability affecting hostmaster (antoine beaupre).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hostmaster antoine_beaupre	`= 6.x-1.2= 6.x-1.3= 6.x-1.4= 6.x-1.5= 6.x-1.6= 6.x-1.7= 6.x-1.8= 6.x-1.x`	No fix yet

Description

The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access restrictions and edit unauthorized nodes.

References

community.aegirproject.org/1.9
drupal.org/node/1585658 · Patch
drupal.org/node/1585678 · Vendor Advisory
drupalcode.org/project/hostmaster.git/commitdiff/8a61101 · Exploit
openwall.com/lists/oss-security/2012/06/14/3
securityfocus.com/bid/53588
exchange.xforce.ibmcloud.com/vulnerabilities/75715

More vulnerabilities in hostmaster

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free