CVE-2012-2702

CVE-2012-2702 describes an access control vulnerability in the Ubercart Product Keys module (6.x-1.x before 6.x-1.1) for Drupal, allowing unauthenticated remote attackers to read all unassigned product keys. The vulnerability has a CVSS v2 score of 5.0 (medium severity), indicating low attack complexity and no authentication required, leading to a potential compromise of confidentiality. While the vulnerability is over a decade old, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.