CVE-2012-2720

Published: Jun 27, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges.

Affected (7)

Products: Adam Ross: Tokenauth

1 product

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adam Ross Tokenauth	Version 6.x-1.0
Adam Ross Tokenauth	Version 6.x-1.1
Adam Ross Tokenauth	Version 6.x-1.3
Adam Ross Tokenauth	Version 6.x-1.4
Adam Ross Tokenauth	Version 6.x-1.5
Adam Ross Tokenauth	Version 6.x-1.6
Adam Ross Tokenauth	Version 6.x-1.x dev

Running on/with	Platform Versions
Drupal Drupal	All versions

Related CWEs

References (14)

http://drupal.org/node/1618476

Source: secalert@redhat.com

Patch

http://drupal.org/node/1619808

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/49400

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/06/14/3

Source: secalert@redhat.com

http://www.osvdb.org/82727

Source: secalert@redhat.com

http://www.securityfocus.com/bid/53840

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/76141

Source: secalert@redhat.com

http://drupal.org/node/1618476

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://drupal.org/node/1619808

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/49400

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/06/14/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/82727

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/53840

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/76141

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.