Vulnerability CVE-2012-2731
Published: 2012-06-26   Modified: 2012-06-27

Description:
The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.

See advisories in our WLB2 database:
Topic
Author
Date
Low
Drupal Ubercart AJAX Cart 6.x Information Disclosure
Stewart Adam
14.06.2012

Type:

CWE-200

 (Information Exposure)

CVSS2 => (AV:N/AC:H/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.6/10
2.9/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Richardo ante -> Ubercart ajax cart 

 References:
http://drupal.org/node/1633048
http://drupal.org/node/1619586
http://xforce.iss.net/xforce/xfdb/76332
http://www.securityfocus.com/bid/53999
http://www.openwall.com/lists/oss-security/2012/06/14/3
http://drupalcode.org/project/uc_ajax_cart.git/commitdiff/b59cdd5
Copyright 2024, cxsecurity.com

 

Back to Top