CVE-2012-2704 | BDVDB-2026-52024 Detail

Description#

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://drupal.org/node/1585544
http://drupalcode.org/project/ad.git/commitdiff/c2ffab2
http://www.openwall.com/lists/oss-security/2012/06/14/3
https://exchange.xforce.ibmcloud.com/vulnerabilities/75719
https://drupal.org/node/1580376

Exploit#

No public exploit known

History#

Version 12012-08-31Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.