CVE
- Id
- 15178
- CVE No.
- CVE-2005-3974
- Status
- Candidate
- Description
- Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission.
- Phase
- Assigned (20051203)
- Votes
- None (candidate not yet proposed)
- Comments