Unscored CVE-2012-4498 EUVD-2012-4427GHSA-5r5q-946x-3wrf

The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow r…

Published Nov 2, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow remote attackers to bypass access restrictions and possibly have other unspecified impact.

References

[oss-security] 20121004 CVE Request for Drupal Contributed Modules mailing-list
http://drupal.org/node/1762160
[oss-security] 20121007 Re: CVE Request for Drupal Contributed Modules mailing-list
http://drupal.org/node/1762152