Drupal Organic Groups SA-CONTRIB-2012-148 Security Bypass Vulnerability

Bugtraq ID:	55702
Class:	Access Validation Error
CVE:	CVE-2012-5539
Remote:	Yes
Local:	No
Published:	Sep 26 2012 12:00AM
Updated:	Mar 19 2015 09:43AM
Credit:	Zoltán Tóth and John Takousis
Vulnerable:	Drupal Organic Groups 7.x-1.2 Drupal Organic Groups 7.x-1.1
Not Vulnerable:

Drupal Organic Groups SA-CONTRIB-2012-148 Security Bypass Vulnerability

The Organic Groups module for Drupal is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.

Attackers can exploit this issue to bypass security restrictions to obtain sensitive information or perform unauthorized actions; this may aid in launching further attacks.

Organic groups 7.x-1.x versions prior to 7.x-1.5 are vulnerable.

Drupal Organic Groups SA-CONTRIB-2012-148 Security Bypass Vulnerability

Attackers can exploit this issue through a browser.

Drupal Organic Groups SA-CONTRIB-2012-148 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more details.

Drupal Organic Groups SA-CONTRIB-2012-148 Security Bypass Vulnerability

References:

• Drupal Homepage (Drupal)