« Back to list

CVE-2012-1623

Status: ModifiedMedium (5)—

The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Aidanlister — Regcode

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2012-1623",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-10-06T21:55:04.317",
  "references": [
    {
      "url": "http://drupal.org/node/1394172",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/47443",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.osvdb.org/78184",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/51271",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://drupal.org/node/1394172",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/47443",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/04/07/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/78184",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/51271",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions."
    },
    {
      "lang": "es",
      "value": "El módulo Registration Codes anterior a v6.x-2.4 para Drupal no restringe el acceso a la lista de códigos de registro, lo que podría permitir a atacantes remotos evitar las restricciones de acceso impuestas."
    }
  ],
  "lastModified": "2026-06-16T23:39:54.747",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "062CE97B-A447-4E63-9782-BBEACA93D4A6",
              "versionEndIncluding": "6.x-2.3"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BCF13FF-0886-4AD6-9458-8590C01ED29E"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2ED9CD9-6228-4CC1-9DA0-470A7C69548C"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "723CF8A9-EA44-485E-AABF-2EF836E768F9"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "518D00C7-83AA-47CC-B911-3637399A7724"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6AD60C2B-BAAE-4ADD-BD9C-F9D09F3491BB"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9174B34-3857-44B8-A80A-3A497F233E5A"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-1.x:dev:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7B9857E-912F-4DE1-B9F1-9B6776EF90E6"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DE0ED52-58EF-4015-87E3-CE22D30971C6"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06FB3B55-E514-47C2-92F7-87E76691F591"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F727164A-5003-4A2A-86E0-E52DD1DA34BB"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E02E2503-C247-46B1-B0F6-2E1612D41EDD"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:beta4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "019486AD-9067-4E2E-BE46-63982218EB2D"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.0:dev:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4FE163B-D9B4-400A-B7DD-D4C0F268450D"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32A43363-243F-4320-83B9-E6F20AE9DB33"
            },
            {
              "criteria": "cpe:2.3:a:aidanlister:regcode:6.x-2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E99E8382-CB07-457D-8453-75FD697A0B8F"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}