5.8

CVE-2008-1729

The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profile pages of arbitrary users, and obtain sensitive information from (2) tracker and (3) blog pages, related to a missing check for the "access content" permission; and (4) allows remote authenticated users, with administration page view access, to edit content types.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version >= 6.0 < 6.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.4% 0.819
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://drupal.org/node/244637
Patch
Vendor Advisory
http://secunia.com/advisories/29762
Third Party Advisory
http://www.osvdb.org/44270
Broken Link
http://www.securityfocus.com/bid/28714
Patch
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/1185/references
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41755
Third Party Advisory
VDB Entry