CVE

Id
41216  
CVE No.
CVE-2009-3781  
Status
Candidate  
Description
The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files via unspecified vectors.  
Phase
Assigned (20091026)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
452151 41216 CVE-2009-3781 CONFIRM:http://drupal.org/files/issues/filefield-node-access-fix-516104-3.patch  View
452152 41216 CVE-2009-3781 CONFIRM:http://drupal.org/node/516104  View
452153 41216 CVE-2009-3781 CONFIRM:http://drupal.org/node/609874  View
452154 41216 CVE-2009-3781 CONFIRM:http://drupal.org/node/611128  View
452155 41216 CVE-2009-3781 BID:36792  View
452156 41216 CVE-2009-3781 URL:http://www.securityfocus.com/bid/36792  View
452157 41216 CVE-2009-3781 SECUNIA:37130  View
452158 41216 CVE-2009-3781 URL:http://secunia.com/advisories/37130  View
452159 41216 CVE-2009-3781 XF:filefield-nodeaccess-security-bypass(53897)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45431 JVNDB-2009-006438 Drupal 用モジュールの Simplenews Statistics におけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用モジュールの Simplenews Statistics には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2009-3785 41216 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006438.html  View