NVD

Id
51675  
Name
CVE-2009-4558  
Description
The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2010-01-04  
Modified Date
2010-01-05  
Seq
2009-4558  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261890 51675 CVE-2009-4558 http://drupal.org/node/520564  View
261891 51675 CVE-2009-4558 35710  View
261892 51675 CVE-2009-4558 imageassist-title-information-disclosure(51787)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45585 JVNDB-2009-006592 Drupal 用の Image Assist モジュールにおける任意のノードタイトルを読まれる脆弱性 Drupal 用の Image Assist モジュールは、不特定のページに対する権限要件を適切に強制しないため、以下を読まれる脆弱性が存在します。 CVE-2009-4558 41989 CVE-2009-4558 51675 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006592.html 2009-07-15 2012-12-20 View