CVE-2012-2081 - Vulnerability Details - OpenCVE

The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.0056.

Key SSVC decision points have not yet been added.

Vendors	Products
Drupal	Drupal
Moshe Weitzman	Organic Groups

Configuration 1 [-]

AND

OR	cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:::::::*
	cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc1::::::
	cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc2::::::
	cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc3::::::
	cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.1:::::::*
	cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.2:::::::*
	cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.x:dev::::::

cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2012-2087	The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://drupal.org/node/1507328
http://drupal.org/node/1507446
http://osvdb.org/80678
http://secunia.com/advisories/48620
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.securityfocus.com/bid/52799
https://exchange.xforce.ibmcloud.com/vulnerabilities/74526

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-08-14T23:00:00

Updated: 2024-08-06T19:17:27.906Z

Reserved: 2012-04-04T00:00:00

Link: CVE-2012-2081

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2012-08-14T23:55:01.767

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-2081

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-03-28T00:00:00", "descriptions": [{"lang": "en", "value": "The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "48620", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/48620"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "80678", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/80678"}, {"name": "drupal-organic-views-security-bypass(74526)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74526"}, {"tags": ["x_refsource_MISC"], "url": "http://drupal.org/node/1507446"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://drupal.org/node/1507328"}, {"name": "52799", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/52799"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-2081", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "48620", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/48620"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "80678", "refsource": "OSVDB", "url": "http://osvdb.org/80678"}, {"name": "drupal-organic-views-security-bypass(74526)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74526"}, {"name": "http://drupal.org/node/1507446", "refsource": "MISC", "url": "http://drupal.org/node/1507446"}, {"name": "http://drupal.org/node/1507328", "refsource": "CONFIRM", "url": "http://drupal.org/node/1507328"}, {"name": "52799", "refsource": "BID", "url": "http://www.securityfocus.com/bid/52799"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T19:17:27.906Z"}, "title": "CVE Program Container", "references": [{"name": "48620", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/48620"}, {"name": "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"name": "80678", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/80678"}, {"name": "drupal-organic-views-security-bypass(74526)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74526"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://drupal.org/node/1507446"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://drupal.org/node/1507328"}, {"name": "52799", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/52799"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-2081", "datePublished": "2012-08-14T23:00:00", "dateReserved": "2012-04-04T00:00:00", "dateUpdated": "2024-08-06T19:17:27.906Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:*:*:*:*:*:*:*", "matchCriteriaId": "586989FC-FB44-4DF8-9ABB-9FE1BC9FC8FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F75F245C-CDC2-436A-94A4-3FDBC175CF5A", "vulnerable": true}, {"criteria": "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "AD6163A1-1793-4261-ADE5-58F0A0AC5036", "vulnerable": true}, {"criteria": "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "61903138-CF7F-46EA-A3E1-DC0C324ACACA", "vulnerable": true}, {"criteria": "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.1:*:*:*:*:*:*:*", "matchCriteriaId": "51E76179-60A8-4957-9A28-F28560874E3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.2:*:*:*:*:*:*:*", "matchCriteriaId": "25FD5736-4C27-47E9-A540-C06CD998A344", "vulnerable": true}, {"criteria": "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.x:dev:*:*:*:*:*:*", "matchCriteriaId": "461DF120-E96F-448F-ADA6-A87FA93FA69D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module."}, {"lang": "es", "value": "El m\u00f3dulo 'Organic Groups' (OG) v6.x-2.x, antes de v6.x-2.3 para Drupal no restringe adecuadamente el acceso, lo que permite a atacantes remotos obtener informaci\u00f3n sensible, tales como t\u00edtulos de los grupos privados a trav\u00e9s de una solicitud a trav\u00e9s del m\u00f3dulo de Vistas (Views).\r\n"}], "id": "CVE-2012-2081", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-08-14T23:55:01.767", "references": [{"source": "secalert@redhat.com", "url": "http://drupal.org/node/1507328"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://drupal.org/node/1507446"}, {"source": "secalert@redhat.com", "url": "http://osvdb.org/80678"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/48620"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/52799"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74526"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://drupal.org/node/1507328"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://drupal.org/node/1507446"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/80678"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/48620"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/52799"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74526"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}