{ "schema_version": "1.4.0", "id": "GHSA-v4qv-fcmj-64w9", "modified": "2022-05-14T02:56:39Z", "published": "2022-05-14T02:56:39Z", "aliases": [ "CVE-2012-4430" ], "details": "The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4430" }, { "type": "WEB", "url": "http://secunia.com/advisories/50535" }, { "type": "WEB", "url": "http://secunia.com/advisories/50808" }, { "type": "WEB", "url": "http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view" }, { "type": "WEB", "url": "http://www.bacula.org/en/?page=news" }, { "type": "WEB", "url": "http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905" }, { "type": "WEB", "url": "http://www.debian.org/security/2012/dsa-2558" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:166" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2012/09/14/11" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2012/09/14/12" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2012/09/15/2" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/55505" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2012-10-10T18:55:00Z" } }