CVE-2012-2720

MEDIO 5.0CVE-2012-2720 · Published 27/06/2012 · updated 16/06/2026

In breve

CVE-2012-2720 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda tokenauth (adam ross).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 84.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
tokenauth adam_ross	`= 6.x-1.0= 6.x-1.1= 6.x-1.3= 6.x-1.4= 6.x-1.5= 6.x-1.6= 6.x-1.x`	No fix yet

Description

The Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges.

References

drupal.org/node/1618476 · Patch
drupal.org/node/1619808 · Patch
secunia.com/advisories/49400
openwall.com/lists/oss-security/2012/06/14/3
osvdb.org/82727
securityfocus.com/bid/53840
exchange.xforce.ibmcloud.com/vulnerabilities/76141

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free