PT-2007-4936 · Drupal · Organic Groups+3

Publicado 2007-07-11 · Atualizado 2017-07-29 · CVE-2007-3690

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Forward module versions prior to 4.7-1.1 Drupal Forward module 5.x versions prior to 5.x-1.0

Description The issue allows remote attackers to read restricted posts in various node access modules, including Organic Groups, Taxonomy Access Control, and Taxonomy Access Lite, by modifying URL arguments.

Recommendations For Drupal Forward module versions prior to 4.7-1.1, update to version 4.7-1.1 or later. For Drupal Forward module 5.x versions prior to 5.x-1.0, update to version 5.x-1.0 or later.

Correção

Identificadores relacionados

CVE-2007-3690

Produtos afetados

Drupal Forward

Organic Groups

Taxonomy Access Control

Taxonomy Access Lite

Referências · 9

• http://drupal.org/node/152806 · Correção
• http://osvdb.org/37896 · Nota
• http://vupen.com/english/advisories/2007/2469 · Nota
• http://securityfocus.com/bid/24862 · Nota
• http://secunia.com/advisories/25999 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3690 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35318 · Nota
• http://drupal.org/node/158025 · Correção
• http://drupal.org/node/158022 · Correção