CVE-2012-1623

https://notcve.org/view.php?id=CVE-2012-1623

The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions. El módulo Registration Codes anterior a v6.x-2.4 para Drupal no restringe el acceso a la lista de códigos de registro, lo que podría permitir a atacantes remotos evitar las restricciones de acceso impuestas. • http://drupal.org/node/1394172 http://secunia.com/advisories/47443 http://www.openwall.com/lists/oss-security/2012/04/07/1 http://www.osvdb.org/78184 http://www.securityfocus.com/bid/51271 • CWE-264: Permissions, Privileges, and Access Controls •