4
CVE-2009-2077
- EPSS 0.99%
- Veröffentlicht 16.06.2009 19:30:00
- Zuletzt bearbeitet 16.06.2026 23:08:43
- Erkennungen
LoginDrupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured to display the content, and (2) read private content in generated queries.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Angrydonuts ≫ Views Version 6.x-2.0
Angrydonuts ≫ Views Version 6.x-2.0 Update alpha1
Angrydonuts ≫ Views Version 6.x-2.0 Update alpha2
Angrydonuts ≫ Views Version 6.x-2.0 Update alpha3
Angrydonuts ≫ Views Version 6.x-2.0 Update alpha4
Angrydonuts ≫ Views Version 6.x-2.0 Update alpha5
Angrydonuts ≫ Views Version 6.x-2.0 Update beta1
Angrydonuts ≫ Views Version 6.x-2.0 Update beta2
Angrydonuts ≫ Views Version 6.x-2.0 Update beta3
Angrydonuts ≫ Views Version 6.x-2.0 Update beta4
Angrydonuts ≫ Views Version 6.x-2.0 Update rc1
Angrydonuts ≫ Views Version 6.x-2.0 Update rc2
Angrydonuts ≫ Views Version 6.x-2.0 Update rc3
Angrydonuts ≫ Views Version 6.x-2.0 Update rc4
Angrydonuts ≫ Views Version 6.x-2.0 Update rc5
Angrydonuts ≫ Views Version 6.x-2.1
Angrydonuts ≫ Views Version 6.x-2.2
Angrydonuts ≫ Views Version 6.x-2.3
Angrydonuts ≫ Views Version 6.x-2.4
Angrydonuts ≫ Views Version 6.x-2.5
Angrydonuts ≫ Views Version 6.x-2.x Update dev
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.99% | 0.58 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
http://drupal.org/node/488068
http://drupal.org/node/488082
http://secunia.com/advisories/35425
http://www.securityfocus.com/bid/35304