PT-2008-3272 · Drupal · Drupal Simple Access

Publicado 2008-04-11 · Atualizado 2017-08-08 · CVE-2008-1731

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Drupal Simple Access module versions 5.x through 5.x-1.2-2

Description The issue is related to the handling of privacy information for nodes, potentially allowing remote attackers to bypass access restrictions and read or modify nodes under certain circumstances involving the interaction between the Simple Access module and other components like Node clone or Project issue tracking.

Recommendations For versions 5.x through 5.x-1.2-2, update the Simple Access module to a version that properly handles node privacy information to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1731

Produtos afetados

Drupal Simple Access

Referências · 7

• http://osvdb.org/44271 · Nota
• http://securityfocus.com/bid/28720 · Correção
• http://vupen.com/english/advisories/2008/1184 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41756 · Nota
• http://secunia.com/advisories/29772 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1731 · Nota de Segurança
• http://drupal.org/node/244560 · Aviso do Fabricante