CVE-2012-1623 : The Registration Codes module before 6.x-2.4 for Drupal does not restrict access

The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions.

Published 2012-10-06 21:55:04

Updated 2012-10-08 04:00:00

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2012-1623

Aidanlister » Regcode
Versions up to, including, (<=) 6.x-2.3
cpe:2.3:a:aidanlister:regcode:*:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-2.2
cpe:2.3:a:aidanlister:regcode:6.x-2.2:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-2.1
cpe:2.3:a:aidanlister:regcode:6.x-2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-1.0
cpe:2.3:a:aidanlister:regcode:6.x-1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-2.0 Update Beta1
cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta1:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-2.0 Update DEV
cpe:2.3:a:aidanlister:regcode:6.x-2.0:dev:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-1.5
cpe:2.3:a:aidanlister:regcode:6.x-1.5:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-1.4
cpe:2.3:a:aidanlister:regcode:6.x-1.4:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-2.0
cpe:2.3:a:aidanlister:regcode:6.x-2.0:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-2.0 Update Beta3
cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta3:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-1.2
cpe:2.3:a:aidanlister:regcode:6.x-1.2:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-1.1
cpe:2.3:a:aidanlister:regcode:6.x-1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-2.0 Update Beta4
cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta4:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-2.0 Update Beta2
cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta2:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-1.3
cpe:2.3:a:aidanlister:regcode:6.x-1.3:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A
Aidanlister » Regcode » Version: 6.x-1.x Update DEV
cpe:2.3:a:aidanlister:regcode:6.x-1.x:dev:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2012-1623

EPSS FAQ

0.38%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 73 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2012-1623

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2012-1623

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2012-1623

http://www.securityfocus.com/bid/51271

Drupal Registration Codes Module Security Bypass Vulnerability
http://www.openwall.com/lists/oss-security/2012/04/07/1

oss-security - CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)

CVEs referencing this url
http://drupal.org/node/1394172

Access to this page has been denied.
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2012-1623

Products affected by CVE-2012-1623

Exploit prediction scoring system (EPSS) score for CVE-2012-1623

CVSS scores for CVE-2012-1623

CWE ids for CVE-2012-1623

References for CVE-2012-1623