5
CVSSv2

CVE-2012-5552

Published: 03/12/2012 Updated: 20/07/2013
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The Password policy module 6.x-1.x prior to 6.x-1.5 and 7.x-1.x prior to 7.x-1.3 for Drupal allows remote malicious users to obtain password hashes by sniffing the network, related to "client-side password history checks."

Vulnerable Product Search on Vulmon Subscribe to Product

erikwebb password_policy 6.x-1.2

erikwebb password_policy 6.x-1.1

erikwebb password_policy 6.x-1.x

erikwebb password_policy 7.x-1.3

erikwebb password_policy 7.x-1.0

erikwebb password_policy 6.x-1.4

erikwebb password_policy 6.x-1.3

erikwebb password_policy 6.x-1.0

erikwebb password_policy 7.x-1.2

erikwebb password_policy 7.x-1.1

erikwebb password_policy 7.x-1.x