CVE-2012-4487

Loading...

General

Score:4.0/10.0
Severity:Low
Category:Access Control Error

Impact Metrics

Confidentiality:None
Integrity:Partial
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:Single

Published on 02/11/12 - Updated on 05/11/12

Description

The Subuser module before 6.x-1.8 for Drupal does not properly check "switch subuser" permissions, which allows remote authenticated parent users to change their role by switching to a subuser they created.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2012-4487

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
boombatowersubuser

Share this vulnerability with:

Twitter Facebook LinkedIn Mail