7.5

CVE-2012-2730

The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly "protect node access when nodes are accessed outside of the standard node view," which allows remote attackers to bypass intended access restrictions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Alexis Wilke ≫ Protected Node Version6.x-1.0
   Drupal ≫ Drupal Version-
Alexis Wilke ≫ Protected Node Version6.x-1.2
   Drupal ≫ Drupal Version-
Alexis Wilke ≫ Protected Node Version6.x-1.3
   Drupal ≫ Drupal Version-
Alexis Wilke ≫ Protected Node Version6.x-1.4
   Drupal ≫ Drupal Version-
Alexis Wilke ≫ Protected Node Version6.x-1.5
   Drupal ≫ Drupal Version-
Alexis Wilke ≫ Protected Node Version6.x-1.x Updatedev
   Drupal ≫ Drupal Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.64% 0.836
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2012/06/14/3
http://drupal.org/node/1258034
Patch
http://drupal.org/node/1632918
Patch
Vendor Advisory
http://secunia.com/advisories/49509
Vendor Advisory
http://www.osvdb.org/82984
http://www.securityfocus.com/bid/54001
https://exchange.xforce.ibmcloud.com/vulnerabilities/76291