Vulnerability CVE-2012-0825 - CERT Civis.Net

Vulnerability Name:

CVE-2012-0825 (CCN-72931)

Assigned:

2012-02-01

Published:

2012-02-01

Updated:

2014-03-08

Summary:

Drupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2012-0825

Source: CCN
Type: Drupal Web Site
Drupal - Open Source CMS | drupal.org

Source: CCN
Type: DRUPAL-SA-CORE-2012-001
Drupal core multiple vulnerabilities

Source: MISC
Type: UNKNOWN
http://openid.net/2011/05/05/attribute-exchange-security-alert/

Source: CCN
Type: SA47796
Drupal Security Issue and Security Bypass Vulnerability

Source: DEBIAN
Type: UNKNOWN
DSA-2776

Source: CCN
Type: BID-51822
Drupal Core Multiple Security Vulnerabilities

Source: CONFIRM
Type: Vendor Advisory
https://drupal.org/node/1425084

Source: XF
Type: UNKNOWN
openid-sreg-ax-security-bypass(72931)

Vulnerable Configuration:

Configuration 1:

cpe:/a:drupal:drupal:6.0:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:beta1:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:beta2:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:beta3:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:beta4:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:dev:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:rc1:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:rc2:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:rc3:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.0:rc4:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.1:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.2:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.10:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.11:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.12:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.13:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.14:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.15:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.16:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.17:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.18:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.19:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.20:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.21:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.22:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.23:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:beta1:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:beta2:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:beta3:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:dev:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:rc1:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:rc2:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:rc3:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.0:rc4:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.1:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.2:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.3:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.4:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.5:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.6:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.7:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.8:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.9:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.10:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.x:dev:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:drupal:drupal:7.11:*:*:*:*:*:*:*

OR cpe:/a:drupal:drupal:6.23:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:19807	P	DSA-2776-1 drupal6 - several	2014-06-23
oval:com.ubuntu.precise:def:20120825000	V	CVE-2012-0825 on Ubuntu 12.04 LTS (precise) - medium.	2013-10-28
oval:com.ubuntu.xenial:def:201208250000000	V	CVE-2012-0825 on Ubuntu 16.04 LTS (xenial) - medium.	2013-10-28
oval:com.ubuntu.trusty:def:20120825000	V	CVE-2012-0825 on Ubuntu 14.04 LTS (trusty) - medium.	2013-10-28
oval:com.ubuntu.xenial:def:20120825000	V	CVE-2012-0825 on Ubuntu 16.04 LTS (xenial) - medium.	2013-10-28