CVE-2012-2702 | BDVDB-2026-50694 Detail

Description#

The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote attackers to read all unassigned product keys via certain conditions related to the uid.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://drupalcode.org/project/uc_product_keys.git/commitdiff/19fa261
http://drupal.org/node/1585532
https://exchange.xforce.ibmcloud.com/vulnerabilities/75720
http://www.openwall.com/lists/oss-security/2012/06/14/3
http://secunia.com/advisories/49169
http://osvdb.org/82005
http://drupal.org/node/1580752

Exploit#

No public exploit known

History#

Version 12012-06-27Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.