CVE-2012-5570 The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| basic webmail project basic webmail | = 6.x-1.0 | No fix listed |
| basic webmail project basic webmail | = 6.x-1.1 | No fix listed |
| basic webmail project basic webmail | = 6.x-1.x-dev | No fix listed |
References
- www.openwall.com mailing-list third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- drupal.org release-notes vendor-advisory
- www.drupal.org vendor-advisory