PT-2013-6254 · Drupal · Og Features Module

Publicado 2013-12-19 · Atualizado 2017-08-29 · CVE-2013-7067

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions OG Features module versions 6.x-1.x before 6.x-1.4 for Drupal

Description The issue allows remote attackers to bypass intended access restrictions. This is due to the OG Features module not properly overriding pages that have an access callback set to false, enabling attackers to access restricted areas via a request.

Recommendations For OG Features module versions 6.x-1.x before 6.x-1.4, update to version 6.x-1.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-7067

Produtos afetados

Og Features Module

Referências · 6

• http://osvdb.org/100611 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89458 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7067 · Nota de Segurança
• https://drupal.org/node/2149791 · Aviso do Fabricante
• https://drupal.org/node/2149743 · Correção
• http://securityfocus.com/bid/64134 · Nota