VulnerabilityModified
CVE-2012-3802
Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors.
MEDIUM 4.0EPSS 1.65%
Does this matter?
Lower severity and a low EPSS score (1.65%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 1.65% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- peter pokrivcak/post affiliate pro
- Source
- cve@mitre.org
References
- http://drupal.org/node/1585648Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/06/14/3
- http://www.securityfocus.com/bid/53589
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75716
- http://drupal.org/node/1585648Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/06/14/3
- http://www.securityfocus.com/bid/53589
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75716
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.