CVE-2012-2702

Name of the Vulnerable Software and Affected Versions Ubercart Product Keys module versions 6.x-1.x before 6.x-1.1 for Drupal

Description The issue allows remote attackers to read all unassigned product keys under certain conditions related to the uid. This occurs because the module does not properly check access for product keys.

Recommendations For Ubercart Product Keys module versions 6.x-1.x before 6.x-1.1, update to version 6.x-1.1 or later to resolve the issue.