VIR Vulnerability Intelligence Relay

CVE-2012-4742

high
Published 2012-08-31 · Modified 2026-04-29
CVSS v3
—
CVSS v2
7.5
VIR risk
7.5

Description

The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://www.packetfence.org/bugs/view.php?id=763

Application impact
VendorProductVersionsFixed
packetfencepacketfence{"endIncluding":"3.0.1"}

References

Verify integrity in audit chain (admin only). AS-IS.