Candidate: CVE-2012-6634 PublicDate: 2014-01-21 01:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6634 https://core.trac.wordpress.org/changeset/21087 http://codex.wordpress.org/Version_3.3.3 Description: wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_wordpress: upstream_wordpress: released (3.3.3) lucid_wordpress: ignored (reached end-of-life) precise_wordpress: ignored (reached end-of-life) precise/esm_wordpress: DNE (precise was needed) quantal_wordpress: not-affected raring_wordpress: not-affected saucy_wordpress: not-affected trusty_wordpress: not-affected trusty/esm_wordpress: DNE (trusty was not-affected) utopic_wordpress: not-affected vivid_wordpress: not-affected vivid/stable-phone-overlay_wordpress: DNE vivid/ubuntu-core_wordpress: DNE wily_wordpress: not-affected xenial_wordpress: not-affected yakkety_wordpress: not-affected zesty_wordpress: not-affected devel_wordpress: not-affected