NVD

Id
1671  
Name
CVE-2008-1731  
Description
The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-04-11  
Modified Date
2011-03-07  
Seq
2008-1731  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10859 1671 CVE-2008-1731 http://drupal.org/node/244560  View
10860 1671 CVE-2008-1731 28720  View
10861 1671 CVE-2008-1731 ADV-2008-1184  View
10862 1671 CVE-2008-1731 simpleaccess-privacy-info-disclosure(41756)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46776 JVNDB-2008-002086 Drupal Simple Access モジュールにおけるセキュリティ回避の脆弱性 Drupal の Simple Access モジュールには、ノードのプライバシー情報を適正に扱えない脆弱性が存在します。 CVE-2008-1731 31844 CVE-2008-1731 1671 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002086.html 2008-04-11 2008-12-24 View