CVE-2005-3974 in Drupal

Sumário

de MITRE

Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 03/12/2005
• Divulgação: 03/12/2005
• Moderação: aceite
• Entrada: VDB-27253
• CPE: pronto
• CWE: CWE-80 (confirmado)
• CVSS: 5.4 (VulDB)
• EPSS: 0.01686
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider, Lawfirm, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3974
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3974
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3974/