CVE-2012-2074 - Vulnerability Details - OpenCVE

Unspecified vulnerability in certain default views in the Ubercart Views module 6.x before 6.x-3.2 for Drupal allows remote attackers to obtain sensitive information via unknown attack vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.0056.

Key SSVC decision points have not yet been added.

Vendors	Products
Drupal	Drupal
Ubercart Views Project	Uc Views

Configuration 1 [-]

AND

OR	cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.0:::::::*
	cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.1:::::::*
	cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.x:dev::::::
	cpe:2.3:a:ubercart_views_project:uc_views:6.x-2.0:::::::*
	cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.0:::::::*
	cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.1:::::::*
	cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.x:dev::::::

cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2012-2080	Unspecified vulnerability in certain default views in the Ubercart Views module 6.x before 6.x-3.2 for Drupal allows remote attackers to obtain sensitive information via unknown attack vectors.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://drupal.org/node/1505210
http://drupal.org/node/1506428
http://osvdb.org/80677
http://secunia.com/advisories/48631
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.securityfocus.com/bid/52814
https://exchange.xforce.ibmcloud.com/vulnerabilities/74485

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-08-14T23:00:00

Updated: 2024-08-06T19:17:27.837Z

Reserved: 2012-04-04T00:00:00

Link: CVE-2012-2074

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2012-08-14T23:55:01.503

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-2074

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-03-27T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in certain default views in the Ubercart Views module 6.x before 6.x-3.2 for Drupal allows remote attackers to obtain sensitive information via unknown attack vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://drupal.org/node/1506428"}, {"name": "48631", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/48631"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://drupal.org/node/1505210"}, {"name": "drupal-ubercart-defaultviews-info-disclosure(74485)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74485"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "80677", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/80677"}, {"name": "52814", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/52814"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-2074", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in certain default views in the Ubercart Views module 6.x before 6.x-3.2 for Drupal allows remote attackers to obtain sensitive information via unknown attack vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://drupal.org/node/1506428", "refsource": "MISC", "url": "http://drupal.org/node/1506428"}, {"name": "48631", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/48631"}, {"name": "http://drupal.org/node/1505210", "refsource": "CONFIRM", "url": "http://drupal.org/node/1505210"}, {"name": "drupal-ubercart-defaultviews-info-disclosure(74485)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74485"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "80677", "refsource": "OSVDB", "url": "http://osvdb.org/80677"}, {"name": "52814", "refsource": "BID", "url": "http://www.securityfocus.com/bid/52814"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T19:17:27.837Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://drupal.org/node/1506428"}, {"name": "48631", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/48631"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://drupal.org/node/1505210"}, {"name": "drupal-ubercart-defaultviews-info-disclosure(74485)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74485"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "80677", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/80677"}, {"name": "52814", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/52814"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-2074", "datePublished": "2012-08-14T23:00:00", "dateReserved": "2012-04-04T00:00:00", "dateUpdated": "2024-08-06T19:17:27.837Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.0:*:*:*:*:*:*:*", "matchCriteriaId": "9A3AD3A4-224C-4C13-B7B9-37A291134607", "vulnerable": true}, {"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.1:*:*:*:*:*:*:*", "matchCriteriaId": "2CE18463-3D75-4BF0-AFEA-40D26D1FCEA3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.x:dev:*:*:*:*:*:*", "matchCriteriaId": "6F3503BA-283A-4D33-9F1A-A0A615D5C4D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-2.0:*:*:*:*:*:*:*", "matchCriteriaId": "6F45D3CB-30C5-4554-8594-5DE7DBE6492E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.0:*:*:*:*:*:*:*", "matchCriteriaId": "A33F7740-9855-4CAF-A399-A61A0F0037DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.1:*:*:*:*:*:*:*", "matchCriteriaId": "07206969-A4BB-4439-A152-7240E71C606A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.x:dev:*:*:*:*:*:*", "matchCriteriaId": "E486FB1A-0A82-4824-BA3E-722AC8C06D74", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in certain default views in the Ubercart Views module 6.x before 6.x-3.2 for Drupal allows remote attackers to obtain sensitive information via unknown attack vectors."}, {"lang": "es", "value": "Una vulnerabilidad no especificada en ciertas vistas por defecto en el m\u00f3dulo Ubercart Views v6.x antes de v6.x-3.2 para Drupal permite a atacantes remotos obtener informaci\u00f3n sensible a trav\u00e9s de vectores de ataque desconocidos.\r\n"}], "id": "CVE-2012-2074", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-08-14T23:55:01.503", "references": [{"source": "secalert@redhat.com", "tags": ["Patch"], "url": "http://drupal.org/node/1505210"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://drupal.org/node/1506428"}, {"source": "secalert@redhat.com", "url": "http://osvdb.org/80677"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/48631"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/52814"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74485"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://drupal.org/node/1505210"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://drupal.org/node/1506428"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/80677"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/48631"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/52814"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74485"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}