CVE-2012-2704

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain…

published August 31, 2012

CVSS
—
EPSS
2%
Percentile
74.0
In the wild
Unconfirmed
What it is

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01504 · 74.0th percentile
Published
2012-08-31T20:00Z
EPSS history
Timeline
  • 31 AUG 20:00Z
    The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain…
    cvelistv5