Detections
Analytics
CVE-2012-2721
critical
Description
The default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not properly check permissions when all users have the "access content" permission removed, which allows remote attackers to bypass access restrictions and possibly have other unspecified impact.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/76150
http://www.securityfocus.com/bid/53838
http://www.openwall.com/lists/oss-security/2012/06/14/3
http://secunia.com/advisories/49397