CVE-2012-5586

CVE-2012-5586 describes an information disclosure vulnerability in the Services module for Drupal, affecting versions 6.x-3.x prior to 6.x-3.3 and 7.x-3.x prior to 7.x-3.3. This flaw allows remote authenticated users with "access user profiles" permission to retrieve arbitrary users' email addresses. The vulnerability has a low CVSS score of 2.1, indicating a network-based attack with high access complexity, requiring authentication, and resulting in partial confidentiality impact without integrity or availability compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.