VULNERABILITY INTELLIGENCE

CVE-2012-4500

CVSS score3.5 LOW

EPSS probability0.99%

CISA KEVNot currently listed

Published2012-10-31

Last modified2026-06-16

Description

The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcements" permission to bypass node access restrictions and possibly have other unspecified impact.