CVE-2012-3385
MEDIUM
5.0
CVSS 2.0
Description
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.
Affected WordPress components
-
WordPress coreUp to and including 3.4.0; Version 0.71; Version 1.0; Version 1.0.1; Version 1.0.2; Version 1.1.1; Version 1.2; Version 1.2.1; Version 1.2.2; Version 1.2.3; Version 1.2.4; Version 1.2.5; Version 1.3; Version 1.3.2; Version 1.3.3; Version 1.5; Version 1.5.1; Version 1.5.1.1; Version 1.5.1.2; Version 1.5.1.3; Version 1.5.2; Version 2.0; Version 2.0.1; Version 2.0.2; Version 2.0.4; Version 2.0.5; Version 2.0.6; Version 2.0.7; Version 2.0.8; Version 2.0.9; Version 2.0.10; Version 2.0.11; Version 2.1; Version 2.1.1; Version 2.1.2; Version 2.1.3; Version 2.2; Version 2.2.1; Version 2.2.2; Version 2.2.3; Version 2.3; Version 2.3.1; Version 2.3.2; Version 2.3.3; Version 2.5; Version 2.5.1; Version 2.6; Version 2.6.1; Version 2.6.2; Version 2.6.3; Version 2.6.5; Version 2.7; Version 2.7.1; Version 2.8; Version 2.8.1; Version 2.8.2; Version 2.8.3; Version 2.8.4; Version 2.8.5; Version 2.8.5.1; Version 2.8.5.2; Version 2.8.6; Version 2.9; Version 2.9.1; Version 2.9.1.1; Version 2.9.2; Version 3.0; Version 3.0.1; Version 3.0.2; Version 3.0.3; Version 3.0.4; Version 3.0.5; Version 3.0.6; Version 3.1; Version 3.1.1; Version 3.1.2; Version 3.1.3; Version 3.1.4; Version 3.2; Version 3.2.1; Version 3.3; Version 3.3.2; Version 3.3.3
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- wordpress wordpress — Up to and including 3.4.0
- wordpress wordpress — Version 0.71
- wordpress wordpress — Version 1.0
- wordpress wordpress — Version 1.0.1
- wordpress wordpress — Version 1.0.2
- wordpress wordpress — Version 1.1.1
- wordpress wordpress — Version 1.2
- wordpress wordpress — Version 1.2.1
- wordpress wordpress — Version 1.2.2
- wordpress wordpress — Version 1.2.3
- wordpress wordpress — Version 1.2.4
- wordpress wordpress — Version 1.2.5
- wordpress wordpress — Version 1.3
- wordpress wordpress — Version 1.3.2
- wordpress wordpress — Version 1.3.3
- wordpress wordpress — Version 1.5
- wordpress wordpress — Version 1.5.1
- wordpress wordpress — Version 1.5.1.1
- wordpress wordpress — Version 1.5.1.2
- wordpress wordpress — Version 1.5.1.3
- wordpress wordpress — Version 1.5.2
- wordpress wordpress — Version 2.0
- wordpress wordpress — Version 2.0.1
- wordpress wordpress — Version 2.0.2
- wordpress wordpress — Version 2.0.4
- wordpress wordpress — Version 2.0.5
- wordpress wordpress — Version 2.0.6
- wordpress wordpress — Version 2.0.7
- wordpress wordpress — Version 2.0.8
- wordpress wordpress — Version 2.0.9
- wordpress wordpress — Version 2.0.10
- wordpress wordpress — Version 2.0.11
- wordpress wordpress — Version 2.1
- wordpress wordpress — Version 2.1.1
- wordpress wordpress — Version 2.1.2
- wordpress wordpress — Version 2.1.3
- wordpress wordpress — Version 2.2
- wordpress wordpress — Version 2.2.1
- wordpress wordpress — Version 2.2.2
- wordpress wordpress — Version 2.2.3
- wordpress wordpress — Version 2.3
- wordpress wordpress — Version 2.3.1
- wordpress wordpress — Version 2.3.2
- wordpress wordpress — Version 2.3.3
- wordpress wordpress — Version 2.5
- wordpress wordpress — Version 2.5.1
- wordpress wordpress — Version 2.6
- wordpress wordpress — Version 2.6.1
- wordpress wordpress — Version 2.6.2
- wordpress wordpress — Version 2.6.3
- wordpress wordpress — Version 2.6.5
- wordpress wordpress — Version 2.7
- wordpress wordpress — Version 2.7.1
- wordpress wordpress — Version 2.8
- wordpress wordpress — Version 2.8.1
- wordpress wordpress — Version 2.8.2
- wordpress wordpress — Version 2.8.3
- wordpress wordpress — Version 2.8.4
- wordpress wordpress — Version 2.8.5
- wordpress wordpress — Version 2.8.5.1
- wordpress wordpress — Version 2.8.5.2
- wordpress wordpress — Version 2.8.6
- wordpress wordpress — Version 2.9
- wordpress wordpress — Version 2.9.1
- wordpress wordpress — Version 2.9.1.1
- wordpress wordpress — Version 2.9.2
- wordpress wordpress — Version 3.0
- wordpress wordpress — Version 3.0.1
- wordpress wordpress — Version 3.0.2
- wordpress wordpress — Version 3.0.3
- wordpress wordpress — Version 3.0.4
- wordpress wordpress — Version 3.0.5
- wordpress wordpress — Version 3.0.6
- wordpress wordpress — Version 3.1
- wordpress wordpress — Version 3.1.1
- wordpress wordpress — Version 3.1.2
- wordpress wordpress — Version 3.1.3
- wordpress wordpress — Version 3.1.4
- wordpress wordpress — Version 3.2
- wordpress wordpress — Version 3.2.1
- wordpress wordpress — Version 3.3
- wordpress wordpress — Version 3.3.2
- wordpress wordpress — Version 3.3.3
References
- codex.wordpress.org http://codex.wordpress.org/Version_3.4.1
- www.openwall.com http://www.openwall.com/lists/oss-security/2012/07/02/1
- www.openwall.com http://www.openwall.com/lists/oss-security/2012/07/08/1
- nvd.nist.gov Official NVD record