PT-2008-1919 · Drupal · Drupal Atom Module

Publicado

2008-01-15

·

Atualizado

2017-08-08

·

CVE-2008-0275

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Drupal Atom module versions 4.7 before 4.7.x-1.0 Drupal Atom module versions 5.x before 5.x-1.0
Description The issue is related to improper permission management for node titles, teasers, and bodies, which could allow remote attackers to access syndicated content.
Recommendations For versions 4.7 before 4.7.x-1.0, update to version 4.7.x-1.0 or later. For versions 5.x before 5.x-1.0, update to version 5.x-1.0 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0275

Produtos afetados

Drupal Atom Module