PT-2009-6141 · Drupal · Ngp Coo/Cwp Integration

Published 2009-11-09 · Updated 2017-08-17 · CVE-2009-3920

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NGP COO/CWP Integration (crmngp) module versions prior to 6.x-1.12 for Drupal

Description The issue concerns an administration page that fails to enforce proper access control. This allows remote attackers to access log information through unspecified means.

Recommendations For versions prior to 6.x-1.12, update to version 6.x-1.12 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-3920

Affected Products

Ngp Coo/Cwp Integration

References · 7

• http://secunia.com/advisories/37287 · Vendor Advisory
• http://drupal.org/node/623546 · Vendor Advisory
• http://securityfocus.com/bid/36927 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-3920 · Security Note
• http://drupal.org/node/623506 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54153 · Note
• http://osvdb.org/59677 · Note