CVE-2012-4475

The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to…

published November 30, 2012

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to edit an arbitrary user's questions and answers via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01332 · 70.7th percentile
Published
2012-11-30T22:00Z
EPSS history
Timeline
  • 30 NOV 22:00Z
    The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to…
    cvelistv5