CVE-2013-0182
Published Mar 27, 2013
Last updated 12 years ago
Overview
- Description
- The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments.
- Source
- secalert@redhat.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C75CF26-CFAB-4673-B8CD-0A8B424EA4BC"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha1:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E0F7B95-E3EE-46D3-90EF-CAE9F8629738"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha2:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C50731D2-C283-4C9F-A59F-3DB5CCBE504B"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha3:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3639D22E-9E4E-462C-B4C8-65F79945BD9C"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha4:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9ED8E33-C021-48DE-8D8A-33122AE953EA"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha5:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D55B7373-94C4-48C8-B0A8-EE6FE5A554E3"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha6:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFEC2557-0863-4DCE-A630-9B6BF6CD7107"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta1:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBCDA8F0-A550-4DCD-B04F-641CB6A9D359"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta2:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78017416-B311-4E8E-962E-1D3FF7202B14"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta3:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "251909EB-2C24-45AF-A4EE-611CAEFF700B"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A42E50C-D43C-417B-BE01-B8119B49CED5"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50F447C3-07B6-4B0E-9222-2F8027CC6F97"
},
{
"criteria": "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.x:dev:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB378573-8F37-4159-8CE3-8A2F6CA8B806"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]