PT-2012-5437 · Drupal · The Monthly Archive By Node Type

Joshua Brauer · Publicado 2012-10-31 · Atualizado 2013-03-02 · CVE-2012-4491

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions The Monthly Archive by Node Type module version 6.x for Drupal

Description The issue is related to improper permission checking by the module, allowing remote attackers to access restricted nodes.

Recommendations For The Monthly Archive by Node Type module version 6.x, consider disabling the module until a patch is available to prevent unauthorized access to restricted nodes.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-4491

Produtos afetados

The Monthly Archive By Node Type

Referências · 5

• http://openwall.com/lists/oss-security/2012/10/07/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4491 · Nota de Segurança
• http://securityfocus.com/bid/54768 · Nota
• http://openwall.com/lists/oss-security/2012/10/04/6 · Nota
• http://drupal.org/node/1708198 · Aviso do Fabricante