PT-2007-4935 · Drupal · Organic Groups+3

Publicado 2007-07-11 · Atualizado 2017-07-29 · CVE-2007-3689

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Print module versions prior to 4.7-1.0 Drupal Print module versions 5.x prior to 5.x-1.2

Description The issue allows remote attackers to read restricted posts in various node access modules, including Organic Groups, Taxonomy Access Control, and Taxonomy Access Lite, by modifying URL arguments.

Recommendations For versions prior to 4.7-1.0, update to version 4.7-1.0 or later. For versions 5.x prior to 5.x-1.2, update to version 5.x-1.2 or later.

Correção

Identificadores relacionados

CVE-2007-3689

Produtos afetados

Drupal Print Module

Organic Groups

Taxonomy Access Control

Taxonomy Access Lite

Referências · 9

• http://vupen.com/english/advisories/2007/2470 · Nota
• http://securityfocus.com/bid/24862 · Nota
• http://drupal.org/node/158029 · Correção
• http://drupal.org/node/158032 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-3689 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35314 · Nota
• http://secunia.com/advisories/25978 · Nota
• http://drupal.org/node/152804 · Correção
• http://osvdb.org/37897 · Nota