PT-2007-4935 · Drupal · Organic Groups+3

Published 2007-07-11 · Updated 2017-07-29 · CVE-2007-3689

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Print module versions prior to 4.7-1.0 Drupal Print module versions 5.x prior to 5.x-1.2

Description The issue allows remote attackers to read restricted posts in various node access modules, including Organic Groups, Taxonomy Access Control, and Taxonomy Access Lite, by modifying URL arguments.

Recommendations For versions prior to 4.7-1.0, update to version 4.7-1.0 or later. For versions 5.x prior to 5.x-1.2, update to version 5.x-1.2 or later.

Fix

Related Identifiers

CVE-2007-3689

Affected Products

Drupal Print Module

Organic Groups

Taxonomy Access Control

Taxonomy Access Lite

References · 9

• http://drupal.org/node/158029 · Patch
• http://drupal.org/node/158032 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-3689 · Security Note
• http://drupal.org/node/152804 · Patch
• http://vupen.com/english/advisories/2007/2470 · Note
• http://securityfocus.com/bid/24862 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35314 · Note
• http://secunia.com/advisories/25978 · Note
• http://osvdb.org/37897 · Note