Security Advisory

CVE-2012-1650

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-08-28 16:00:00

Last updated 2024-08-06 19:01:02

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions.

← Browse all CVEs View on cve.org ↗