PT-2009-6141 · Drupal · Ngp Coo/Cwp Integration

Publicado 2009-11-09 · Atualizado 2017-08-17 · CVE-2009-3920

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NGP COO/CWP Integration (crmngp) module versions prior to 6.x-1.12 for Drupal

Description The issue concerns an administration page that fails to enforce proper access control. This allows remote attackers to access log information through unspecified means.

Recommendations For versions prior to 6.x-1.12, update to version 6.x-1.12 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-3920

Produtos afetados

Ngp Coo/Cwp Integration

Referências · 7

• http://secunia.com/advisories/37287 · Aviso do Fabricante
• http://drupal.org/node/623546 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54153 · Nota
• http://securityfocus.com/bid/36927 · Correção
• http://osvdb.org/59677 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3920 · Nota de Segurança
• http://drupal.org/node/623506 · Aviso do Fabricante