CVE-2012-0827

Published: 28 October 2013

The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors.

Priority

Status

Package	Release	Status
drupal7 Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Does not exist
	maverick	Does not exist
	natty	Does not exist
	oneiric	Does not exist
	precise	Not vulnerable (7.12-1)
	upstream	Released (7.11)

References

http://drupal.org/node/1425084
https://www.cve.org/CVERecord?id=CVE-2012-0827
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.