6.4
CVE-2012-1635
- EPSS 0.15%
- Veröffentlicht 28.08.2012 17:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginThe hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML sitemap module to obtain sensitive information about unpublished content.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rik De Boer ≫ Revisioning Version7.x-1.0
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatealpha1
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatealpha2
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatealpha3
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatealpha4
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatealpha5
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta1
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta10
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta11
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta2
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta3
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta4
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta5
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta6
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta7
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta8
Rik De Boer ≫ Revisioning Version7.x-1.0 Updatebeta9
Rik De Boer ≫ Revisioning Version7.x-1.1
Rik De Boer ≫ Revisioning Version7.x-1.2
Rik De Boer ≫ Revisioning Version7.x-1.x
Rik De Boer ≫ Revisioning Version7.x-1.x Updatedev
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.325 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|