Access bypass in Drupal - CVE-2012-2153

Vulnerability identifier: #VU473

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2012-2153

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Drupal

Affected software:
Drupal

The vulnerabiity allows a remote privileged user to get access to nodes from the list on site at admin/content.
The weakness exists due to access control error and leads to obtaining nodes of content administration.
Successful exploitation of the vulnerability allows user to acces content nodes.

Update to 7.13.
https://www.drupal.org/node/1558412

• https://www.drupal.org/SA-CORE-2012-002