CVE-2012-5557

CVE-2012-5557 describes a privilege escalation vulnerability in the Drupal User Read-Only module (versions 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4). The flaw occurs when a Drupal site has more than three roles and specific configurations, leading to improper role assignment. This could allow an authenticated attacker to gain elevated privileges, such as changing user passwords. The vulnerability has a CVSS score of 3.6 (medium severity), indicating a network-based attack with high access complexity, requiring authentication, and potentially leading to partial confidentiality and integrity impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.