CVE-2012-1623 - Vulnerability Details - OpenCVE

The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00262.

Key SSVC decision points have not yet been added.

Vendors	Products
Aidanlister	Regcode
Drupal	Drupal

Configuration 1 [-]

AND

OR	cpe:2.3:a:aidanlister:regcode::::::::
	cpe:2.3:a:aidanlister:regcode:6.x-1.0:::::::*
	cpe:2.3:a:aidanlister:regcode:6.x-1.1:::::::*
	cpe:2.3:a:aidanlister:regcode:6.x-1.2:::::::*
	cpe:2.3:a:aidanlister:regcode:6.x-1.3:::::::*
	cpe:2.3:a:aidanlister:regcode:6.x-1.4:::::::*
	cpe:2.3:a:aidanlister:regcode:6.x-1.5:::::::*
	cpe:2.3:a:aidanlister:regcode:6.x-1.x:dev::::::
	cpe:2.3:a:aidanlister:regcode:6.x-2.0:::::::*
	cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta1::::::
	cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta2::::::
	cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta3::::::
	cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta4::::::
	cpe:2.3:a:aidanlister:regcode:6.x-2.0:dev::::::
	cpe:2.3:a:aidanlister:regcode:6.x-2.1:::::::*
	cpe:2.3:a:aidanlister:regcode:6.x-2.2:::::::*

cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://drupal.org/node/1394172
http://secunia.com/advisories/47443
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.osvdb.org/78184
http://www.securityfocus.com/bid/51271

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-10-06T21:00:00Z

Updated: 2024-09-16T20:46:44.691Z

Reserved: 2012-03-12T00:00:00Z

Link: CVE-2012-1623

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2012-10-06T21:55:04.317

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-1623

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-10-06T21:00:00Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://drupal.org/node/1394172"}, {"name": "47443", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47443"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "51271", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/51271"}, {"name": "78184", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/78184"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-1623", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://drupal.org/node/1394172", "refsource": "MISC", "url": "http://drupal.org/node/1394172"}, {"name": "47443", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47443"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "51271", "refsource": "BID", "url": "http://www.securityfocus.com/bid/51271"}, {"name": "78184", "refsource": "OSVDB", "url": "http://www.osvdb.org/78184"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T19:01:02.848Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://drupal.org/node/1394172"}, {"name": "47443", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47443"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "51271", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/51271"}, {"name": "78184", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/78184"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-1623", "datePublished": "2012-10-06T21:00:00Z", "dateReserved": "2012-03-12T00:00:00Z", "dateUpdated": "2024-09-16T20:46:44.691Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aidanlister:regcode:*:*:*:*:*:*:*:*", "matchCriteriaId": "062CE97B-A447-4E63-9782-BBEACA93D4A6", "versionEndIncluding": "6.x-2.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.0:*:*:*:*:*:*:*", "matchCriteriaId": "0BCF13FF-0886-4AD6-9458-8590C01ED29E", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.1:*:*:*:*:*:*:*", "matchCriteriaId": "E2ED9CD9-6228-4CC1-9DA0-470A7C69548C", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.2:*:*:*:*:*:*:*", "matchCriteriaId": "723CF8A9-EA44-485E-AABF-2EF836E768F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.3:*:*:*:*:*:*:*", "matchCriteriaId": "518D00C7-83AA-47CC-B911-3637399A7724", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.4:*:*:*:*:*:*:*", "matchCriteriaId": "6AD60C2B-BAAE-4ADD-BD9C-F9D09F3491BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.5:*:*:*:*:*:*:*", "matchCriteriaId": "A9174B34-3857-44B8-A80A-3A497F233E5A", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.x:dev:*:*:*:*:*:*", "matchCriteriaId": "C7B9857E-912F-4DE1-B9F1-9B6776EF90E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:*:*:*:*:*:*:*", "matchCriteriaId": "2DE0ED52-58EF-4015-87E3-CE22D30971C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "06FB3B55-E514-47C2-92F7-87E76691F591", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "F727164A-5003-4A2A-86E0-E52DD1DA34BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "E02E2503-C247-46B1-B0F6-2E1612D41EDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "019486AD-9067-4E2E-BE46-63982218EB2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:dev:*:*:*:*:*:*", "matchCriteriaId": "B4FE163B-D9B4-400A-B7DD-D4C0F268450D", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.1:*:*:*:*:*:*:*", "matchCriteriaId": "32A43363-243F-4320-83B9-E6F20AE9DB33", "vulnerable": true}, {"criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.2:*:*:*:*:*:*:*", "matchCriteriaId": "E99E8382-CB07-457D-8453-75FD697A0B8F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions."}, {"lang": "es", "value": "El m\u00f3dulo Registration Codes anterior a v6.x-2.4 para Drupal no restringe el acceso a la lista de c\u00f3digos de registro, lo que podr\u00eda permitir a atacantes remotos evitar las restricciones de acceso impuestas."}], "id": "CVE-2012-1623", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-10-06T21:55:04.317", "references": [{"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://drupal.org/node/1394172"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47443"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"source": "secalert@redhat.com", "url": "http://www.osvdb.org/78184"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/51271"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://drupal.org/node/1394172"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47443"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/78184"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/51271"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}