CVE-2012-4475

Published: Nov 30, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to edit an arbitrary user's questions and answers via unspecified vectors.

Affected (4)

Products: Security Questions Project: Security Questions

Security Questions Project

1 product

Security Questions

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Security Questions Project Security Questions	Version 6.x-1.0
Security Questions Project Security Questions	Version 6.x-1.x dev
Security Questions Project Security Questions	Version 7.x-1.0
Security Questions Project Security Questions	Version 7.x-1.x dev