CVE-2012-4500

Published: Oct 31, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcements" permission to bypass node access restrictions and possibly have other unspecified impact.

Affected (7)

Products: Nancy Wichmann: Announcements

Nancy Wichmann

1 product

Announcements

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nancy Wichmann Announcements	Version 6.x-1.0
Nancy Wichmann Announcements	Version 6.x-1.0 beta
Nancy Wichmann Announcements	Version 6.x-1.1
Nancy Wichmann Announcements	Version 6.x-1.2
Nancy Wichmann Announcements	Version 6.x-1.3
Nancy Wichmann Announcements	Version 6.x-1.4
Nancy Wichmann Announcements	Version 6.x-1.x dev