NVD

Id
52730  
Name
CVE-2007-0506  
Description
The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-01-25  
Modified Date
2011-03-07  
Seq
2007-0506  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266565 52730 CVE-2007-0506 http://drupal.org/node/112146  View
266566 52730 CVE-2007-0506 22224  View
266567 52730 CVE-2007-0506 ADV-2007-0312  View
266568 52730 CVE-2007-0506 projecttracking-access-info-disclosure(31727)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52755 JVNDB-2007-001447 Drupal 用の Project issue tracking モジュールにおけるアクセスコントロールモジュールを回避される脆弱性 Drupal 用の Project issue tracking モジュールの project_issue_access 関数 には、アクセスコントロールモジュールを回避され、添付ファイルおよびissue 情報を取得される脆弱性が存在します。 CVE-2007-0506 23861 CVE-2007-0506 52730 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001447.html 2007-01-23 2012-06-26 View