CVE-2012-1642

CVE-2012-1642

EPSS 2.3%

includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://drupalcode.org/project/linkchecker.git/commit/fef0ddf http://drupal.org/node/1440508 https://drupal.org/node/1441252 http://secunia.com/advisories/48022 http://www.openwall.com/lists/oss-security/2012/04/07/1 http://www.osvdb.org/79315