CVE-2012-2153 in Drupalinfo

Zusammenfassung

von MITRE

Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contributed node access module," which allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservieren

04.04.2012

Veröffentlichung

30.09.2012

Moderieren

akzeptiert

Eintrag

VDB-62487

CPE

bereit

EPSS

0.00432

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!