CVE-2012-2702: The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for produ...

Security readout for executives and security teams

A vulnerable Drupal Ubercart Product Keys module could expose unassigned product keys to remote attackers. This is not a server takeover issue, but it can leak saleable or license-like assets and create revenue, fraud, or customer-support impact. Exposure is likely limited to older Drupal 6 sites using the Ubercart Product Keys contributed module in the 6.x-1.x branch before 6.x-1.1. The source bundle does not identify affected Drupal core versions or other products. Handle as a targeted legacy application risk. Prioritize if the site still issues monetized product keys, licenses, or entitlements; otherwise track as moderate hygiene work during Drupal legacy-risk cleanup. Mitigation focus: Upgrade Ubercart Product Keys to 6.x-1.1 or later where still in use.; Check Drupal project guidance before applying changes to legacy sites.; Restrict public access to product-key views until remediation is confirmed..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.