CVE-2012-5552

CVE-2012-5552 describes a vulnerability in the Drupal Password policy module (versions 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.3) that allows remote attackers to obtain password hashes. This is due to client-side password history checks, enabling network sniffing to capture sensitive information. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, leading to a potential compromise of confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.