NVD

Id
36601  
Name
CVE-2013-0246  
Description
The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-07-16  
Modified Date
2013-07-16  
Seq
2013-0246  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187020 36601 CVE-2013-0246 http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html  View
187021 36601 CVE-2013-0246 20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities  View
187022 36601 CVE-2013-0246 [oss-security] 20130130 Re: CVE  View
187023 36601 CVE-2013-0246 https://drupal.org/SA-CORE-2013-001  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21784 JVNDB-2013-003359 Drupal の Image モジュールにおける他の制限イメージの派生イメージを読まれる脆弱性 Drupal の Image モジュールは、プライベートファイルシステムの使用時に、派生イメージ (derivative image) へのアクセスを適切に制限しないため、他の制限イメージ (restricted image) の派生イメージを読まれる脆弱性が存在します。 CVE-2013-0246 60188 CVE-2013-0246 36601 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003359.html 2013-01-16 2013-07-17 View