Unrated severityNVD Advisory· Published Dec 3, 2012· Updated Jun 16, 2026
CVE-2012-5554
CVE-2012-5554
Description
The default configuration for the Webform CiviCRM Integration module 7.x-3.x before 7.x-3.2 has "Enforce Permissions" disabled, which allows remote attackers to obtain contact information by reading webforms.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:*:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:beta5:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.1:*:*:*:*:*:*:*
- cpe:2.3:a:coleman_watts:webform_civicrm:7.x-3.x:dev:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- drupal.org/node/1774252nvdPatch
- drupal.org/node/1834868nvdPatchVendor Advisory
- drupal.org/node/1768632nvd
- www.openwall.com/lists/oss-security/2012/11/20/4nvd
News mentions
0No linked articles in our index yet.