CVE-2012-1650

CVE-2012-1650 describes a vulnerability in the ZipCart module for Drupal 6.x before version 6.x-1.4, where it incorrectly checks the "access content" permission instead of "access ZipCart downloads" when creating archives. This flaw allows authenticated users with general content access to bypass intended download restrictions, potentially leading to unauthorized access to sensitive files. With a CVSS score of 6.0, this medium-severity vulnerability has a network attack vector, medium attack complexity, and results in partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there known public exploits or significant community discussion surrounding this CVE.