PT-2013-3549 · Drupal · Edit Limit

Publicado 2013-07-16 · Atualizado 2017-08-29 · CVE-2013-2122

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Edit Limit module for Drupal versions 7.x-1.x before 7.x-1.3

Description The issue allows remote authenticated users with the edit comments permission to edit arbitrary comments of other users. This is due to the module not properly restricting access to comments.

Recommendations For Edit Limit module for Drupal versions 7.x-1.x before 7.x-1.3, update to version 7.x-1.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-2122

Produtos afetados

Edit Limit

Referências · 9

• http://seclists.org/fulldisclosure/2013/May/208 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84630 · Nota
• http://secunia.com/advisories/53556 · Aviso do Fabricante
• http://securityfocus.com/bid/60209 · Nota
• http://osvdb.org/93725 · Nota
• https://drupal.org/node/2006188 · Aviso do Fabricante
• https://drupal.org/node/2007048 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2013/05/29/9 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2122 · Nota de Segurança