Drupal Ubercart Views Module Information Disclosure Vulnerability

Bugtraq ID:	52814
Class:	Design Error
CVE:	CVE-2012-2074
Remote:	Yes
Local:	No
Published:	Mar 29 2012 12:00AM
Updated:	Aug 16 2012 01:20PM
Credit:	Derek Wright
Vulnerable:	Drupal Ubercart Views 6.X
Not Vulnerable:	Drupal Ubercart Views 6.X-3.2

Drupal Ubercart Views Module Information Disclosure Vulnerability

The Ubercart Views module for Drupal is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

Ubercart Views 6.x versions prior to 6.x-3.2 are vulnerable.

Drupal Ubercart Views Module Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

Drupal Ubercart Views Module Information Disclosure Vulnerability

Solution:
Updates are available; please see the references for more information.

Drupal Ubercart Views Module Information Disclosure Vulnerability

References:

• Drupal Language Switcher Dropdown Homepage (Drupal)
  
• SA-CONTRIB-2012-047 - Ubercart Views - Information disclosure (Drupal)
  
• Ubercart Views Homepage (Drupal)