Security Advisory

CVE-2012-4483

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-10-31 16:00:00
Last updated 2024-09-17 04:05:03
Assigner redhat
State PUBLISHED

Description

The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_default.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensitive information via the recent comments listing.