NVD

Id
2192  
Name
CVE-2008-2271  
Description
The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the "access content" permission to list tables and obtain session IDs from the database.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-16  
Modified Date
2011-03-07  
Seq
2008-2271  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13962 2192 CVE-2008-2271 http://drupal.org/node/258547  View
13963 2192 CVE-2008-2271 29242  View
13964 2192 CVE-2008-2271 ADV-2008-1541  View
13965 2192 CVE-2008-2271 site-access-content-info-disclosure(42453)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46766 JVNDB-2008-002076 Drupal Site Documentation モジュールにおけるデータベースのテーブル情報開示の脆弱性 Site Documentation Drupal モジュールには、他ユーザの権限を取得される脆弱性が存在します。 CVE-2008-2271 32384 CVE-2008-2271 2192 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002076.html 2008-05-16 2008-12-24 View