PT-2007-4936 · Drupal · Organic Groups+3

Published 2007-07-11 · Updated 2017-07-29 · CVE-2007-3690

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Forward module versions prior to 4.7-1.1 Drupal Forward module 5.x versions prior to 5.x-1.0

Description The issue allows remote attackers to read restricted posts in various node access modules, including Organic Groups, Taxonomy Access Control, and Taxonomy Access Lite, by modifying URL arguments.

Recommendations For Drupal Forward module versions prior to 4.7-1.1, update to version 4.7-1.1 or later. For Drupal Forward module 5.x versions prior to 5.x-1.0, update to version 5.x-1.0 or later.

Fix

Related Identifiers

CVE-2007-3690

Affected Products

Drupal Forward

Organic Groups

Taxonomy Access Control

Taxonomy Access Lite

References · 9

• http://drupal.org/node/152806 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-3690 · Security Note
• http://drupal.org/node/158025 · Patch
• http://drupal.org/node/158022 · Patch
• http://osvdb.org/37896 · Note
• http://vupen.com/english/advisories/2007/2469 · Note
• http://securityfocus.com/bid/24862 · Note
• http://secunia.com/advisories/25999 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35318 · Note