CVE-2012-2061

Published: Sep 17, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."

Affected (1)

Products: Nijskens Raf: Admintools

Nijskens Raf

1 product

Admintools

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nijskens Raf Admintools	All versions

Running on/with	Platform Versions
Drupal Drupal	All versions

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (8)

http://drupal.org/node/1482126

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/04/07/1

Source: secalert@redhat.com

http://www.securityfocus.com/bid/52502

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/74058

Source: secalert@redhat.com

http://drupal.org/node/1482126

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/04/07/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/52502

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/74058

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.